{"report_id":"467ed866-5064-435f-ba77-0576eb98b03e","version":6,"status":"done","tags":[],"date":"2026-03-14T02:48:31Z","url":{"schema":"http","addr":"d2emu.com","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"title":"D2Emu","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"d2emu.com","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T02:48:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-14","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-1773.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"pbs.nitropay.com","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-11-04","domain_rank":161825,"first_seen":"2024-12-31T09:33:48.566269Z","last_seen":"2026-03-10T21:20:21.675213Z","alert_count":0,"request_count":3,"received_data":1857,"sent_data":2019,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":2,"received_data":39052,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.btloader.com","ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":7055,"first_seen":"2020-10-14T15:25:59Z","last_seen":"2026-03-12T05:23:18.246156Z","alert_count":0,"request_count":3,"received_data":876,"sent_data":1536,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"qsearch-a.akamaihd.net","ip":{"addr":"23.36.77.98","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":13022,"first_seen":"2014-02-27T14:18:30Z","last_seen":"2026-03-13T11:20:33.940866Z","alert_count":0,"request_count":1,"received_data":296,"sent_data":660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ats-wrapper.privacymanager.io","ip":{"addr":"3.164.240.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-11-21","domain_rank":15932,"first_seen":"2021-09-15T20:22:08Z","last_seen":"2026-03-07T02:48:13.159462Z","alert_count":0,"request_count":2,"received_data":256216,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ad-delivery.net","ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-05-03","domain_rank":3060,"first_seen":"2017-06-22T05:33:30Z","last_seen":"2026-03-11T23:06:30.208178Z","alert_count":0,"request_count":11,"received_data":12815,"sent_data":4721,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ib.adnxs-simple.com","ip":{"addr":"185.89.211.84","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"domain_registered":"2021-03-03","domain_rank":115353,"first_seen":"2021-04-06T13:01:30Z","last_seen":"2026-03-10T21:04:01.077088Z","alert_count":0,"request_count":2,"received_data":10996,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"btloader.com","ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-06","domain_rank":975,"first_seen":"2020-10-22T20:38:52Z","last_seen":"2026-03-11T23:06:30.040627Z","alert_count":0,"request_count":2,"received_data":159712,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"t.nit.ro","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":102716,"first_seen":"2023-12-02T03:29:23Z","last_seen":"2026-03-10T21:20:23.205958Z","alert_count":0,"request_count":1,"received_data":170,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-08T22:34:03.678313Z","alert_count":0,"request_count":1,"received_data":31565,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-08T22:22:58.987044Z","alert_count":0,"request_count":1,"received_data":459917,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":5,"received_data":195771,"sent_data":2715,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consent.nitrocnct.com","ip":{"addr":"104.21.33.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-21","domain_rank":164926,"first_seen":"2022-10-31T21:02:17Z","last_seen":"2026-03-10T21:20:21.408963Z","alert_count":0,"request_count":2,"received_data":904836,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ab.dns-finder.com","ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2025-10-24T08:56:49.667026Z","last_seen":"2026-03-07T06:06:53.983851Z","alert_count":0,"request_count":2,"received_data":810,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"floors.nitropay.com","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-11-04","domain_rank":194472,"first_seen":"2025-01-13T15:35:22.272241Z","last_seen":"2026-03-10T21:20:22.538013Z","alert_count":0,"request_count":1,"received_data":272,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.confiant-integrations.net","ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-28","domain_rank":9120,"first_seen":"2022-09-15T09:38:48Z","last_seen":"2026-03-07T02:48:13.151179Z","alert_count":0,"request_count":4,"received_data":1560225,"sent_data":1805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d2emu.com","ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-05","domain_rank":446986,"first_seen":"2026-03-14T02:48:36.296567Z","last_seen":"2026-03-14T02:48:36.296567Z","alert_count":0,"request_count":22,"received_data":3442570,"sent_data":9811,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"s.nitropay.com","ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-04","domain_rank":155654,"first_seen":"2018-05-21T15:18:02Z","last_seen":"2026-03-10T21:20:21.5168Z","alert_count":1,"request_count":8,"received_data":917000,"sent_data":4730,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":141288,"sent_data":1009,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-20T02:39:33.552127Z","times_seen":75298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-1773.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a5f2d300fb667eb92abd9d482019c54","sha1":"cf91336f3fc92e84a936252c70661fb75476c20f","sha256":"e5ca68340913a7a9bfc7fd5af9fadc9d9516d3213d171f7bb5be8efb32335bd9","sha512":"3656f617d6dce083c45fb47c3ba86f58bc8974fc4532b3cf6713fd54efdbcd733b8b57fbfa6e2e35b5f36816c74c6d9fcd4734168a83ace3a0e8a57aa9f0eae7","ssdeep":"12288:LllGSv26kkH62QnSDZDZNdPCb2iDjLbU/Vxe92RqZdmJMPUfIO:LllGSv26kkH62QnSDPNdPCbTLbU/C92F","tlshash":"4ee45c8a3292f4ba43f654e5d03b4705f2396a053409c450f52eadeb3929e9b7273f78","size":668868,"data":"","first_seen":"2026-03-14T02:48:41.652211Z","last_seen":"2026-03-14T02:48:41.652211Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-14","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-1773.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/sandbox%20eval%20code","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-06-07T07:56:57.266545Z","times_seen":161086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00b2f924002207f2a433c390f1082ed4","sha1":"3ba9d19e7f7a415d5fecd2314d61a1feace178eb","sha256":"d2cb3daccdc304d3133aa4c129cafd9c043f8ccea25eb49b9deca7942bb67c9b","sha512":"d38b6656ba226974785e49c2d5cac96769802e8760216281623a21cdb654af58b1a1cbf1fca2577d0ac5f4b28cb2cf8c4e272f148108fa16b1c8bcc5e2b5b264","ssdeep":"","tlshash":"67c08cb9672e8935988c00ac3064c3fd3c389d0a320a3220a22e21782824e841101ea8","size":163,"data":"","first_seen":"2026-03-14T02:48:41.657212Z","last_seen":"2026-03-14T02:48:41.657212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","size":652,"data":"","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-06-18T01:53:27.569923Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c75c3f5e49814e513be7296834e2fe78","sha1":"5b5524128bf305d9a86706e04b0f9430f1610b37","sha256":"30fd3872e3e8aacb2128ed2994355623892287c010146cabc28c9ea0f7e9ff74","sha512":"93433bd4a16c1f7a95fd0132956588422313e8b8aa339e613e2e9d850b3c69d2f0ab0beb2162d42b0d2f7d8762d88cb68f9cecdf3336124e959a18c2a46fa3ac","ssdeep":"","tlshash":"b3c04c731401453151e518fd69e79b843f328859505d561851ec5c8d7c92f8f49639cb","size":153,"data":"","first_seen":"2026-03-14T02:48:41.658281Z","last_seen":"2026-03-14T02:48:41.658281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6056bc03e34fa51d2b7fd409419d891c","sha1":"252cd99bcbe6fb05088e8a1a95507229df385f72","sha256":"37cb5db20552035ea0acb917e6d646f2751432ba3b69b446f5c843315b5ff849","sha512":"c820a025f537b9ae549b2f1ee80c3eee28954185707feb13cb8afaa264a29c9cd40b1651164c212da248cbc7ec66b16e678726ee1914aa90936934560faeaf48","ssdeep":"","tlshash":"e3c08c88254b0c7044ab2a4a8f3f7202b00a22136091e8313e0e63089f30e279398848","size":183,"data":"","first_seen":"2026-03-14T02:48:41.659148Z","last_seen":"2026-03-14T02:48:41.659148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","size":892,"data":"","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-06-18T01:53:27.585227Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a82f0a5d674950eeeff9e0e8065b80a3","sha1":"5478126e64e764ff86d985b8e7d25b4e8e761ad4","sha256":"85a7a66c1bc9e70e45048fa8a217dbb51ca356c453a4197d353683f64c3eef7c","sha512":"5532059d866f8183843cfba6515e37cb8c902c0aab55799bb8ca11961960380b2e84963c1594ff820e25247ac64c71ce2ad1a4db361dc6446e9417eb551e5d48","ssdeep":"","tlshash":"2211ce629ed010be952ae14bd380f6ad32681d07d79b4ebf5d1cfc94c1d81ee0d82788","size":1000,"data":"","first_seen":"2025-06-21T10:48:04.840511Z","last_seen":"2026-06-07T03:46:27.989235Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-06-07T07:56:57.284078Z","times_seen":147384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/thirdparty/darkmode.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85f9d731929b326bb61fd26ea1f87707","sha1":"36a0a9226a92f213cc803c05d86677bef4d69552","sha256":"22f2ea9a07bd88632716cafdbefc358173c6e26e2bb3965b23de213d6fb219a2","sha512":"3710bbb8879a428899c4584513590e9fed99a6722a57806860947b271086ec9c67a756d10392f28bdd65e7386e613166853adc6c653509ba93fc78a32eecf027","ssdeep":"192:6qnumfdgLaTjqgp6QtNvbWgWpcNkc1sVkxLFpiPX5ypeMwDQKyC:pO1gRtNtPR1fLFOUv+","tlshash":"bad1316860b71e3742b340d65be35b417738a043a01afc54b9cda6dd0f8a288dd63bdb","size":6343,"data":"","first_seen":"2026-03-14T02:48:41.629978Z","last_seen":"2026-03-14T02:48:41.629978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.164.240.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","size":127492,"data":"","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-06-13T06:47:51.950575Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"766353cbe7104951eea3cf5f814da375","sha1":"76b3856cf57a9cf23d6a6417abb43ed37c6beedb","sha256":"2de2d7be42a8c34703ce9fd140c491a79d6f78f0e1b9a57ea1aef3bccf05d6a8","sha512":"c3fedeeea40ab072d0a12a58458d9ddea11315939e797f4da30ae4e26b16de32fbd331e55dfb6a150a10ad9b52a58d2a24abef83e50365eb974ac726d536dfe9","ssdeep":"12288:RDTCeJvWi2sCKKs683Lb1FpJOLq/P3eAn:RD/nbOK","tlshash":"a5b4a11f095f202cb6723ad7abaf5d5055dd21cb6eedc654e3923f4c034a7122e2b868","size":519545,"data":"","first_seen":"2026-03-14T02:48:41.637253Z","last_seen":"2026-03-14T02:48:41.637253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6060be574fc5f7fb0f05acb63110af89","sha1":"f0a0c379c69f320346be8156727eb12f1158d279","sha256":"1171ed8e847b12bb7358847bfa735e02957687cf819d1a640cf745ea48e722ff","sha512":"a1e181e3e67a3defb588ab1ebb367f1857c30888356cb5cc8727eb2c9c6119285a6ea8d312db0e3f75ec5298136400fbab6b0b6db9c571155d0c9f4e27bd3cdd","ssdeep":"","tlshash":"50d022f330501a1183f012809165860e3137484fdc86a882803a486c1a42bcf448f892","size":200,"data":"","first_seen":"2026-03-14T02:48:41.662413Z","last_seen":"2026-03-14T02:48:41.662413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce51f3b5d8fefcea97c693bb91e4f925","sha1":"8e9eacf17665de93c188fe81cc9ebf27838995bb","sha256":"b2fe977f4017768bcfe6b3f049c8010598cd2de2c3a8557c48d59f34bf23c5dd","sha512":"df1b667a224150aca505d384761b4b497afd2db4477f18c65acd912f5b6fb31d225183397a263507338833b09023d555820d1971ba41b5f6fadcaeb73815b1b3","ssdeep":"3072:hPf/m82Kvop3qab1LlXpJOLqDLVFc8TD9Q8uQXUj:hPfeFKvop3Lb1LBpJOLq/P3yrQg","tlshash":"0f449d2e096e246df56339cbd68f1d20669d12cbabecc9e5d6137f8c424bb402d2f464","size":261026,"data":"","first_seen":"2026-03-14T02:48:41.594138Z","last_seen":"2026-03-14T02:48:41.594138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/js/auth.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ef301ccef67b07de88128a8981e7f6","sha1":"d553f7fe9ceda16896be7e8b82e116a27e263d83","sha256":"562e73b8ea98cda6cf83358be5c57912eff683a725f39ccb85fe4055cd19c000","sha512":"90a27785ce034912e1e8f17994f2f964e5b1141eee4bee77469e9d34a1ff2c1c85ac06c7c7b43ea8f43d46603bc34863a66c6c76a40c5ae6daf4c49703be462b","ssdeep":"48:N/PP35ATwLquP8UNZd6wgfjNyw8Dt0+VauaOFfZvttt7/1pjHWbU8SLIWrH1FL7W:NhcWFZLGN5GVauaOHx//TpPLUo90fzV","tlshash":"19b1231ee9970527142360edf6e7a316bcb61003600ddd18799c9a893fc2e5865f3ef6","size":5093,"data":"","first_seen":"2026-03-14T02:48:41.636473Z","last_seen":"2026-03-14T02:48:41.636473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/thirdparty/jquery-3.6.3.min.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30792621ca010e3c5d5f98162629439f","sha1":"9bc5b058a9e9fe3820484290bd0810681072e448","sha256":"448ef0632211ba18d7c1557a6d22250820ac3b4465ba2e73b7137f4dc4a31a12","sha512":"a11aa53ac62fbf37277796ffe2eb7d94c89ad60290861fa3acecf545d095ede4402c51399c6589956a002685cc31c2ff4854846c2719d280d69c9b33c3779f68","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:EcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"039318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","size":89946,"data":"","first_seen":"2023-03-13T14:09:05Z","last_seen":"2026-06-19T05:54:28.077726Z","times_seen":3142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e735588497f0d908b08ad7c98ea77b74","sha1":"7944a22c0f3b23d4676c3137e134c2352b95422a","sha256":"c5056f37213e7cfeae12b78a281704b0d07449cb90ba809fb0042942b1673539","sha512":"2d4fc0fcac5b26e450d104cfc46d817d5731974352abb0fa016f8f983111c096d687edf69e150141af3556a0e7fdf1f4396f065ddc29717064e10cf596586d17","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjjsgNyduidvbmZgo/GgmS3mOS2:HRDb+B5dwb6fqvjy4Qvbpvg9","tlshash":"a574b4552f90bc8923d79b7bba2f70d1f46a085b68880c4fe102fc5479e8613fad59b1","size":364459,"data":"","first_seen":"2026-01-29T16:27:08.413655Z","last_seen":"2026-06-05T05:22:18.877333Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amazon-adsystem.com/aax2/apstag.js","fqdn":"c.amazon-adsystem.com","domain":"amazon-adsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7099d0c144c906961206e41b26b23c05","sha1":"59a67da2d27d4e5fc0e183bb2baeebe39404f553","sha256":"3f19f9cf504b435adb7e62aac1b420facfc0048d6a4950910fd6f126548cc69e","sha512":"c92d4da99978949c6a2d856ee6afd9f61d296e4e0414e6197f600312dc79e2e639755874c2776e9cc80dfe8341ac5210567afdc4d79193f8f750e759d36b700a","ssdeep":"","tlshash":"de31db6d69f10c650061b42b1baba6757726409b2d88fed1fe4c96708f0e05fa1f0bdc","size":1585,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-06-07T07:52:12.991387Z","times_seen":37362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/js/dark.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21e4a33c5596033c69a81534ea5f9a84","sha1":"de38178206d8f5e59fc5217e45ea24151451d75c","sha256":"7425986ba209375c269da2f886ba293c2d4b2fcc85dfce70c5e0e0892ee8d477","sha512":"eaf65b57e05df0aba845d0e0452fbe0ed92e1f69538fa3f06fa8e388f0d4d135e73cb5443637b6e3d9828d9c8d34c1488607eec86793c5486fc08c0a08de7d49","ssdeep":"","tlshash":"a2217b6b0cbb0a2380b6159d3b4baa0b3938008353059d657dcc54595fc9dd4d1f7b6f","size":1298,"data":"","first_seen":"2026-03-14T02:48:41.611675Z","last_seen":"2026-03-14T02:48:41.611675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed7e0cc1ddd4834ea53a02273a499d98","sha1":"a9247f28fed090cc5c296bfb290f5bf9ee14e644","sha256":"90db62e0866279a7d7facc0289f71b91874eb51a129e8b8a74934db405e9683c","sha512":"39dae9089876d2c77b70e55964c77358659ac98c073eb34c3e78d3b04e885c6468e05c8fa8fb7e3dd8da5d85ea150daadb218f9228cc0d8211733377aa58e84d","ssdeep":"","tlshash":"a5d05e2f64d9f69f06b120b266ff67177c960b2428440905432058ebfcb3f0bd956acb","size":272,"data":"","first_seen":"2026-03-14T02:48:41.66385Z","last_seen":"2026-03-14T02:48:41.66385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1DNME47EKC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aa45a1ad0e470fa472154ca09254848","sha1":"7fa2ed65530c4c1d405590ac3b92ba0039c64097","sha256":"925008946df73212ef6a2bf184e522eafd7285e1109df4f2099dae708b2b8528","sha512":"cc784086b077107ec7d07eb43802c4881399ce7e83b9487254cc8109c8aa3e579bbb8729673f8643286b463a7348b4bda275b753d36f7e95e0eb98348584db1c","ssdeep":"6144:FKT0k+98CN708voOE8cvQVsgXBGOYsVxueWpw0HpO9KT:63A8CNglOE89VkX3","tlshash":"eba4faceb3d674229396f478503f018ba57b29a2b45cc899f189cce42d7469a4237f7c","size":459313,"data":"","first_seen":"2026-03-14T02:48:41.616622Z","last_seen":"2026-03-14T02:48:41.616622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/sandbox%20eval%20code","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"f019f144761e15f741f6ab1e4cf566a5","sha1":"1c73bccb222e44ae4633750eda7c357460a81a03","sha256":"4cacaf0fd3e370c4840c87c79f923f1ffb69ff7ce5d8172390783c8f83861d62","sha512":"614dbb696b7185a4291bf2c43c4b7442e46740b0a76ec537472bb0fdae208c239642f5160175cef935876f72df688409f170513809606f8aefdfe6613f88947f","ssdeep":"","tlshash":"04c08c92aa5018ed2a602ab176206013e2c676012be3d585f00a00ab5080eba18585a0","size":148,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-06-07T07:52:12.995561Z","times_seen":38138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b8d34bd9ee031254d3540e1ea4f0a0e","sha1":"b72ec68d3eb3bb478a230d204ffcbeaeb9cb54e7","sha256":"73676c45cbd3df81188e7cfa4ed3168c4d1995d0891c293393bb738d4bebe1f0","sha512":"01bec34dc503e57837970899b418a98156a76b5e03849d6283452eb02fe0c2908b61dc7df5c0e79f21e6a378f591e599378a4d4fd88290ba51ff498847409fe8","ssdeep":"","tlshash":"85c02b3208124b1d875820c0c43dc32c261be00eec444147c43c080c7810f8a041fd01","size":138,"data":"","first_seen":"2026-03-14T02:48:41.665207Z","last_seen":"2026-03-14T02:48:41.665207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bcfb005739de9a993609da6235e2f80","sha1":"daa3d369726aad2fec433be478ea2d424d0e1e64","sha256":"7c928ef663300295e06d9e916eeffb10bd25422152ccda53a8a17b5b0d53353b","sha512":"0dd81017341219020a939fd3418b2afaba4905afaad4d9c9e1cfc06d2e05573f02d9cd4353b9a5a3a1c16597ab6f27e3e6c88009945f17215c93720d082a4062","ssdeep":"","tlshash":"27d0229029af4e50405310e013eb0d4a13a5e207a80ab92030ef05884f1c06498c77c1","size":222,"data":"","first_seen":"2026-03-14T02:48:41.666058Z","last_seen":"2026-03-14T02:48:41.666058Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"daa6d8a71edff1449eda01cfa227ceaa","sha1":"5c404381d7bf6eb5e641d24ec6bbd72964052f7a","sha256":"f033af6bdce57d15656d48339f0c60be70353fa9445f746834e37d9b30e4cb68","sha512":"03731429eddf4937cc50a4bee2d99f7e0014304d99d3c6805e52c678dcee9fad022659421206a7b7eed3b320707627cdd99443b145fa91e16d245879768b3f37","ssdeep":"","tlshash":"afb02b873409051000d725fd902107403c32801c070c8614382504141860e5910338c4","size":127,"data":"","first_seen":"2026-03-14T02:48:41.666905Z","last_seen":"2026-03-14T02:48:41.666905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-19T22:04:57.976142Z","times_seen":78162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.164.240.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dde16afa226595333401e98c8405b57b","sha1":"e5669a6dd78f81308e7ac840182ab65f937200e0","sha256":"0ea9a1ee9a989242dbb158b7ff4728517652327131e60b430a33afc69f37345c","sha512":"7f5f87206d7742d6dc45b7b166f56c2be9bfd5eb27a1a484e6126157666ec733453ca50cf90e8e320bcf9e17619bf038f007c059918810739b397964767af809","ssdeep":"","tlshash":"48110e172af9d8e113fb90f5006a0217fa261c733652f4bc69d9ccc19855b4f31e66b6","size":1000,"data":"","first_seen":"2026-01-13T18:32:50.845418Z","last_seen":"2026-06-07T03:46:27.972833Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22c9510dd6a58363437666e28a5f3b83","sha1":"59be8f2ac9174b828474418ce938017539bc1646","sha256":"23e14b9ce9c53467ed2b2534ab45e973383d8e728320bb750aab5667e6b4a3f7","sha512":"876c489f4c4245c88b12a4ba19836e52c541909e00320efec40840567aecc2c6fbc43dce36f2462006d680d5d4e7914a258f68b769ec0dede8aca269f6eb6f62","ssdeep":"","tlshash":"8e213256a5080a2eb82384ddea5b336734a20003790ee00cbc6f94799f53a7da53b6e0","size":1409,"data":"","first_seen":"2026-03-14T02:48:41.671553Z","last_seen":"2026-03-14T02:48:41.671553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-20T02:39:33.552127Z","times_seen":75298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"775a360444549d65a784f7a844a0f943","sha1":"b2d38648fc341af7fc24f30624db03f5d264ed54","sha256":"a0b6244bdd1af266348a8417f3d9f201563f5f9bf7dcba3279776b55cbfaa95f","sha512":"9906bc51d95da53308a820b1846a4b49ca4567377424423d956b0633b1ca9ab8d27c76218c6165970620f5661aa82d6f82970cb5e888a9464d36cb6b9e2584fa","ssdeep":"","tlshash":"0e216167d48111222857e1ddf856d34bf8e30013a60ec818b7ee92279f83f394207945","size":1131,"data":"","first_seen":"2026-03-14T02:48:41.673018Z","last_seen":"2026-03-14T02:48:41.673018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"518342a8fda983fee60b3c85f6924359","sha1":"35f051a126d6f1ef4bb6f7d15bb22c8f2b6fea24","sha256":"5c2858f0e51b8f179d8ab59c852e05c2e8c09540d1f5c6d34d2d36dcd4f31e7d","sha512":"7944c99de63f460370874cb656b9a2d917f963d5598eb580883963b2391cbf49a8263c80edada2860e2e2b31e7b7158f60c5badb19d22528e37ed8dbc9559930","ssdeep":"","tlshash":"2731d25fd152097580bf6a7573af938436f4c48b8441c9223d5cc7c90f6bcd150a8af9","size":1533,"data":"","first_seen":"2026-03-14T02:48:41.674134Z","last_seen":"2026-03-14T02:48:41.674134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d12dc92a4f1d5f6677edc2b071a709f","sha1":"8be298b04db8df5c0a4ee5e8fbef7e960a9d6ee1","sha256":"d862bc766fa3045902025df0000d58458744779bc4b4c60cae39f024ad88b83f","sha512":"c3b2f436cd0d70dacc5dff4f4750561d6a42bf58fbbe61dc3361c3a61326df57499a24c80363a7fc1c90106a97850cef40c6ce0f3630c81b61568fca2fdb6a74","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjqrvZ7sgNyduidvbmlwoKDob2nt:HRDb+B5dwb6fqYZ7jy4QvbpomoUt","tlshash":"2994e8516bd0bc592bd36b7bba1b70d1f49b089628940c0fd212fca479ec61beac15f4","size":412567,"data":"","first_seen":"2026-01-29T18:23:04.464093Z","last_seen":"2026-06-05T05:22:18.891719Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f5a90ff646650dcf388a398b7950d1c0","sha1":"a9972ad201f125275bdf3ea079814a8ed00c5e8c","sha256":"56450141418a6d285dafe621832daadca9394e3a9fe767f7193ea7de8bebabd5","sha512":"c77ac6fc86937faacc03177acebdd5e64724131117799bc46abe80c907807c8eee1d24782311092a7a1188fa34f50c8d19586cf193762fcf3016570d88878389","ssdeep":"","tlshash":"38c02bf33c44455103f143c451a0840f2023080fcc96fc42806695640743acf0dc78a1","size":147,"data":"","first_seen":"2026-03-14T02:48:41.675267Z","last_seen":"2026-03-14T02:48:41.675267Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"36416f5e8e9e53ddba436f3c9df5057d","sha1":"6bdbcfba02406db56d83eb3c354c8ac90ff805e2","sha256":"0bb7fb78eb60c7deaa2fbe19ddd045136c2b8a4c85def352d5619b99a1b4743f","sha512":"b666e9894568dfc8a17c0e6eeb6e96fd1d5aba3b81481144d0413c5a6354394c0cf9c3251f63dacb0de3f17a33149c5cfbdb59d3f5719dafcdce43efdce38f04","ssdeep":"","tlshash":"7ca024131c03c15d0f045ccc4474d11c0007f00cdc44c517c47c0400f530cd41c01f00","size":85,"data":"","first_seen":"2026-03-14T02:48:41.676779Z","last_seen":"2026-03-14T02:48:41.676779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/robotomono/v31/L0x5DF4xlVMF-BfR8bXMIjhLq38.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 07 Mar 2026 23:56:28 GMT\r\nexpires: Sun, 07 Mar 2027 23:56:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:42:52 GMT\r\ncontent-type: font/woff2\r\nage: 528701\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32796, version 1.0","md5":"877722deef76ad28ea1ae5cf5e265a94","sha1":"ede7afbe887a70f22993d3a7da10b09fd58ff33b","sha256":"b81cd55177300649be8f95b3b747d721ce607e8ed2856e25bd0c630cfd631faf","sha512":"57d45f99a461633961fa7b10b5779001aff30c52d1bd1140bd0ecfe3b1b69da4e5c0120bb6d6d5fb0f06c344d0805c30e2aa08fcb2542a028611a2a264366d00","ssdeep":"768:+kWXmeGFcvj07i6aR4m0oaUEWNvZcjhsHlX2G/dS+92Z5NuI/L:+L2Lzi6aum0NUEW9ijhqXl/dSlZ5jL","tlshash":"72e20258d8954f3cebc4b572c0879bfccad58023f89d5564a47f4ab0e089e1f1934967","first_seen":"2025-05-21T16:47:22.796758Z","last_seen":"2026-06-19T23:11:31.76798Z","times_seen":6193,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":84,"dns":3,"connect":23,"send":0,"wait":14,"receive":4,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/openrtb2/auction","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:37:36 GMT","end":"Wed, 03 Jun 2026 00:33:31 GMT"},"fingerprint":{"sha1":"80:C5:F5:7E:3A:20:AD:65:23:E0:16:27:C5:DC:6D:AD:59:2F:6B:46","sha256":"DC:25:88:CD:17:DC:ED:84:33:7A:26:76:44:E3:30:BF:F7:6D:FE:ED:AB:F4:B5:12:78:9B:5D:31:CD:C8:0C:FD"}}},"request":{"raw":"POST /openrtb2/auction HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\ncontent-type: text/plain\r\nContent-Length: 2716\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2716,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-right\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-right\",\"adserver\":{\"adslot\":\"banner-right\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"msft-s2s\":{\"placement_id\":35743233},\"openx-s2s\":{\"delDomain\":\"ggsoftware-d.openx.net\",\"unit\":\"564010828\"}},\"adunitcode\":\"banner-right\"}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":160,\"h\":600},{\"w\":300,\"h\":600},{\"w\":300,\"h\":250}],\"pos\":1},\"id\":\"banner-right\",\"secure\":1},{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-right\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-right\",\"adserver\":{\"adslot\":\"banner-right\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"msft-s2s\":{\"placement_id\":35743233},\"openx-s2s\":{\"delDomain\":\"ggsoftware-d.openx.net\",\"unit\":\"564010831\"}},\"adunitcode\":\"banner-right\"}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":2,\"plcmt\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":225,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"banner-right-2\",\"secure\":1}],\"source\":{\"tid\":\"87f3cf22-6009-4f33-947d-8c033cb5a5bb\",\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]}}},\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"d2emu.com\",\"publisher\":{\"domain\":\"d2emu.com\",\"id\":\"1\"},\"page\":\"https://d2emu.com/\",\"name\":\"d2emu\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"680\",\"687\"],\"kwarray\":[\"Action RPG / Soulslike\",\"Diablo II\",\"Modding\",\"Emulation\",\"Private Servers\",\"Hack and Slash\",\"Game Development\",\"Reverse Engineering\",\"Blizzard Entertainment\",\"Game Server Hosting\"],\"ext\":{\"data\":{\"documentLang\":\"en\"}},\"content\":{\"language\":\"en\"}},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQhDnIAQhDnIADyvWAENCVFAAAAAAAAAACiQAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"d2emu.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"68d8f28e-1da0-456a-b6aa-f07d3db9187e\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1}},\"ext\":{\"prebid\":{\"auctiontimestamp\":1773456500532,\"targeting\":{\"includewinners\":true,\"includebidderkeys\":false},\"aliases\":{\"msft-s2s\":\"appnexus\",\"openx-s2s\":\"openx\"},\"floors\":{\"enabled\":true},\"schains\":[{\"bidders\":[\"msft-s2s\",\"openx-s2s\"],\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]}}],\"channel\":{\"name\":\"pbjs\",\"version\":\"v10.16.0\"}},\"tmaxmax\":2200},\"id\":\"b4931fbb-5061-4c66-8fb6-50b09207fb03\",\"test\":0,\"tmax\":1500}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://d2emu.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\nx-prebid: pbs-go/3.29.0\r\ndate: Sat, 14 Mar 2026 02:48:20 GMT\r\ncontent-length: 304\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ffad8d1c467329194e32c92c0358d779","sha1":"ab349b68fcc9f76d290cea364c2bced68935d1e1","sha256":"d2e82d3f5e5af2976ab9c8c4419ce492f7c47a0251bad7990487f779027782b9","sha512":"0ae9f60e5fc08d11d22dd799855ff13bf2c5c58167011b540083b4cd07bfa623eea22f40afcff6fa6746e8f697280ae041f47d25edc6f6601eb772b6cec91191","ssdeep":"","tlshash":"06e0725b281e39b29b273b037a0f0a6004b53024ea98ad0a2ebc827c252941e4a26224","first_seen":"2026-03-14T02:48:41.592222Z","last_seen":"2026-03-14T02:48:41.592222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qsearch-a.akamaihd.net/log?logid=kfk\u0026evtid=projectevents\u0026project=prebid\u0026dn=d2emu.com\u0026requrl=https%3A%2F%2Fd2emu.com%2F\u0026pbav=\u0026pbver=10.16.0\u0026cid=8CU87559X\u0026event=ajax_log_failed\u0026value=\u0026rd=TypeError%3A%20NetworkError%20when%20attempting%20to%20fetch%20resource.","fqdn":"qsearch-a.akamaihd.net","domain":"qsearch-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"23.36.77.98","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /log?logid=kfk\u0026evtid=projectevents\u0026project=prebid\u0026dn=d2emu.com\u0026requrl=https%3A%2F%2Fd2emu.com%2F\u0026pbav=\u0026pbver=10.16.0\u0026cid=8CU87559X\u0026event=ajax_log_failed\u0026value=\u0026rd=TypeError%3A%20NetworkError%20when%20attempting%20to%20fetch%20resource. HTTP/1.1\r\nHost: qsearch-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 35\r\nExpires: Sat, 14 Mar 2026 02:48:20 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 14 Mar 2026 02:48:20 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"349909ce1e0bc971d452284590236b09","sha1":"adfc01f8a9de68b9b27e6f98a68737c162167066","sha256":"796c46ec10bc9105545f6f90d51593921b69956bd9087eb72bee83f40ad86f90","sha512":"18115c1109e5f6b67954a5ff697e33c57f749ef877d51aa01a669a218b73b479cfe4a4942e65e3a9c3e28ae6d8a467d07d137d47ece072881001ca5f5736b9cc","ssdeep":"","tlshash":"9c800003f2a0800ac2c2c0300e0ab3a0a282b0a00ac0aa02b08ca3acec2a0b80c00000","first_seen":"2023-04-10T17:49:14Z","last_seen":"2026-06-19T19:50:32.118837Z","times_seen":7480,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":105,"dns":83,"connect":1,"send":0,"wait":2,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 55751\r\ncf-ray: 9dbff533df8649c5-OSL\r\nx-amz-id-2: XtoAAoU0ThqfQ5J8jBPXb6xON6kafnVnnvvD/6RPnKA8ollnylo8UyCjRAroYDWu7/h/uJ/5IstlzswbjOaNaZgUYRWLQ4g0\r\nx-amz-request-id: DVKYAHRJ5ECT59P1\r\nlast-modified: Sat, 14 Mar 2026 02:27:19 GMT\r\netag: \"fec07bbe55285ba82e902706d77b6505\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 749\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":261026,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64598)","md5":"ce51f3b5d8fefcea97c693bb91e4f925","sha1":"8e9eacf17665de93c188fe81cc9ebf27838995bb","sha256":"b2fe977f4017768bcfe6b3f049c8010598cd2de2c3a8557c48d59f34bf23c5dd","sha512":"df1b667a224150aca505d384761b4b497afd2db4477f18c65acd912f5b6fb31d225183397a263507338833b09023d555820d1971ba41b5f6fadcaeb73815b1b3","ssdeep":"3072:hPf/m82Kvop3qab1LlXpJOLqDLVFc8TD9Q8uQXUj:hPfeFKvop3Lb1LBpJOLq/P3yrQg","tlshash":"0f449d2e096e246df56339cbd68f1d20669d12cbabecc9e5d6137f8c424bb402d2f464","first_seen":"2026-03-14T02:48:41.594138Z","last_seen":"2026-03-14T02:48:41.594138Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-ladder.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-ladder.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 101583\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-18ccf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdbEhMOhXZkjPMZfwGxIS%2BovtjP8XKvD6ReAL6ezUBxXk%2BYUXGtHrwLDrNV70kLsboO33jwMSnHd9eisG7nObJ1oWXznC3IPxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341cc74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1496 x 291, 8-bit/color RGBA, non-interlaced","md5":"7c4f980d57ef7f97e379c2a26c20ec37","sha1":"55de73e9ba0f30120989f24e9fb0f658dc62556a","sha256":"bfb9469cce176172eaef41fa943f0fcb57fa7004a6891bf943cbdb3563c48a0a","sha512":"d4aab907fe9ce0884f67b7dc240f5c1e1f834796e8ebab79b4176af0b17dd754c4a1289eb98fa7c7cae34016e9c7d637d689db702b7db769de1657cd4ce75af2","ssdeep":"1536:vXW6PjVcz/MypJ57+iIno53j0eacFq2IM+b5YiL9obaa5hlDbPB5/ebz:+spco0TZ+o5YeacFuTZoGa5hNHebz","tlshash":"a8a3bd13c0a870ab6c47af7e1dc50b05bd160981009a6e3eef2e557f265f5b3aca725c","first_seen":"2026-03-14T02:48:41.59525Z","last_seen":"2026-03-14T02:48:41.59525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.164.240.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Feb 2026 06:46:37 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TeF9K5j8FeAE5n018RwEB4sEoyaU1OSm\r\nserver: AmazonS3\r\ndate: Sat, 14 Mar 2026 02:01:29 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"bed77b09df36050cffca2f15ec751180\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: yO1lnGmTIaYWn-4V-4GsV02uplBqHl57ha5hnF3AobZmaNdq8VNBxQ==\r\nage: 2801\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":127492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-06-13T06:47:51.950575Z","times_seen":325,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.5041521903007479","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:15.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.5041521903007479 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260516\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff55718f51a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs-simple.com/openrtb2/prebidjs","fqdn":"ib.adnxs-simple.com","domain":"adnxs-simple.com","tld":"com"},"ip":{"addr":"185.89.211.84","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs-simple.com","organization":""},"issuer":{"commonName":"GeoTrust TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:93:03:3E:0F:5D:3C:DC:60:F3:0B:D2:4F:42:C2:A8:93:9D:65:29","sha256":"AC:86:20:31:09:6A:E5:52:9F:F3:85:B4:7A:30:47:34:2E:03:71:15:B6:50:D7:B9:8E:AD:49:2D:07:CD:86:56"}}},"request":{"raw":"POST /openrtb2/prebidjs HTTP/1.1\r\nHost: ib.adnxs-simple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\ncontent-type: text/plain\r\nContent-Length: 1929\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1929,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-left\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-left\",\"adserver\":{\"adslot\":\"banner-left\"},\"keywords\":[]},\"tid\":\"u99c17429-7b6d-42da-ad83-3c7d203a6e03\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":160,\"h\":600},{\"w\":300,\"h\":600},{\"w\":300,\"h\":250}],\"pos\":3,\"w\":160,\"h\":600},\"id\":\"d37ad893-3b57-40cd-8993-b255bb494e8d\",\"secure\":1}],\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"d2emu.com\",\"publisher\":{\"domain\":\"d2emu.com\"},\"page\":\"https://d2emu.com/\",\"name\":\"d2emu\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"680\",\"687\"],\"kwarray\":[\"Action RPG / Soulslike\",\"Diablo II\",\"Modding\",\"Emulation\",\"Private Servers\",\"Hack and Slash\",\"Game Development\",\"Reverse Engineering\",\"Blizzard Entertainment\",\"Game Server Hosting\"],\"ext\":{\"data\":{\"documentLang\":\"en\"}},\"content\":{\"language\":\"en\"}},\"source\":{\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]},\"tidSource\":\"pbjs\"},\"tid\":\"u9a3cb25e-3035-4abe-b153-9d00a3e66746\"},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQhDnIAQhDnIADyvWAENCVFAAAAAAAAAACiQAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"d2emu.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"68d8f28e-1da0-456a-b6aa-f07d3db9187e\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1}},\"id\":\"14434a3c-a187-4614-90c0-bc7477060e2a\",\"test\":0,\"tmax\":2200,\"ext\":{\"appnexus\":{\"prebid\":true,\"hb_source\":1,\"sdk\":{\"version\":\"10.16.0\",\"source\":\"pbjs\"},\"referrer_detection\":{\"rd_ref\":\"https%3A%2F%2Fd2emu.com%2F\",\"rd_top\":true,\"rd_ifs\":0,\"rd_stk\":\"https%3A%2F%2Fd2emu.com%2F\",\"rd_can\":\"https://d2emu.com/\"}}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.5\r\ndate: Sat, 14 Mar 2026 02:48:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://d2emu.com\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nx-openrtb-version: 2.4\r\nan-x-request-uuid: 29157524-7ce0-4178-84d9-32e44a8432df\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4646,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ab452a7805ba511d12658cabfdd7d91","sha1":"cc065b4aef124d64b800b56041e4c337251eed8d","sha256":"5f31f579ec4c998023dd72baedda4041b8cb5c5fe52a2e372cbd0df85c69fc41","sha512":"b4cdfc995a70643c83eb862416a337cb245b7d567553f757c659723bfb84966cd45dc87813c092a0c31f2f9c289cec46186b053640856c2146c2b7e7b4e151c3","ssdeep":"96:oaPrLWMPGsP6qacLVx5xf7WK9F+laWrCTNZWxnEUA+RZA:1LWXG6qa+T5xf77FIaWrCTN0njrR+","tlshash":"c1a15c725b90dcc2e6c36855d1ac39fdac533607ebaccaed49e80152110c515ae3c6e8","first_seen":"2026-03-14T02:48:41.600513Z","last_seen":"2026-03-14T02:48:41.600513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":203,"dns":139,"connect":18,"send":0,"wait":164,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.164.240.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Feb 2026 06:46:37 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TeF9K5j8FeAE5n018RwEB4sEoyaU1OSm\r\nserver: AmazonS3\r\ndate: Sat, 14 Mar 2026 02:01:29 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"bed77b09df36050cffca2f15ec751180\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: mDFUQ5FPDyxwEHsKgHG9QNTZzd31d7bi1zSje21Bv7p3tQXZ-kOTGQ==\r\nage: 2799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":127492,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bed77b09df36050cffca2f15ec751180","sha1":"7047dcf4a72a70b0a64239f91cd2e872b6c0c29a","sha256":"16001190a7a501f9c484e3c887db95d8f68a5959e044bf2066c96d62b7681442","sha512":"aeabf1907f3e59828f1e95ea2fa30ff02def506133054348917779bd6d1d59a3135087c587a2991fceec188ae485fc877bb920b7f1058e2faa2b73ce43c42f70","ssdeep":"1536:1T1wG6qJdvIt2iIo+TSq9vLq7ikbqJkO29askn0iCsLxxucK97IYgQ/s8VERzODo:1Q0dvIt2iIo+TSiLXkbQ2Ask0sacOtAN","tlshash":"00c32bca31e1f4d613e750f0902f610ab3b268a9281cd490f7a4dce56d76b4e91b3f69","first_seen":"2026-02-11T17:09:00.637431Z","last_seen":"2026-06-13T06:47:51.950575Z","times_seen":325,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":32,"dns":13,"connect":8,"send":0,"wait":15,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /gpp-61d490e.min.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: AGQBYWy5FeL8wba4_2GRJ-RB0uvCJ_f2lSO3gilwehcFxFu8phzeZoNuoqOCIjoY5gfNnqT0-hR5Fik\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 19:08:44 GMT\r\nlast-modified: Mon, 23 Jun 2025 17:15:57 GMT\r\netag: W/\"f395e7dd1a28244d02ec61ab69555c1b\"\r\nx-goog-generation: 1750698957275780\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 232723\r\nx-goog-hash: crc32c=kd50Hw==, md5=85Xn3RooJE0C7GGraVVcGw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 113965\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 9dbff538f99fc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":232723,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"f395e7dd1a28244d02ec61ab69555c1b","sha1":"6eb5f963cf2cdc08f9272909481535932491d8af","sha256":"fc5521185e7dec9f2c67fdf916d6a81db3ca1d571b1e8d89ffb7dec282e83d31","sha512":"7000e497d5d64c35303d43a8dbaa225091040a7f97a8d2273d84528ea8bdb9a1bbfcc146ea00d9c4e004ffb3659a421226cff0900937b5cc696094014d12ca49","ssdeep":"6144:KDkB6373jBqwke6WYr4mVeMrGlX6mUJVneJ7ODnt1fQLZPlTwGLf5qHDIf4RakOh:EEyi4m2WWvyO5jIsy0","tlshash":"72342b4476f0a0b6115f40a3c62af5267a353968940818607ebc7ccd1fc6ace9c6bfbd","first_seen":"2025-06-27T23:48:54.667058Z","last_seen":"2026-06-18T01:53:27.511312Z","times_seen":2600,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/vendor-list-v3.json","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"104.21.33.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 20:47:17 GMT","end":"Thu, 30 Apr 2026 21:44:39 GMT"},"fingerprint":{"sha1":"EA:64:B8:9A:65:A9:56:24:D8:4E:9A:BA:6E:99:7C:A9:B1:2D:1C:8F","sha256":"25:5C:09:2E:BF:96:BA:2D:3C:4E:E6:2C:C8:79:60:58:AA:97:D9:86:D1:E2:34:DC:30:A9:3F:A9:78:BF:42:0C"}}},"request":{"raw":"GET /vendor-list-v3.json HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: application/json\r\nx-guploader-uploadid: AGQBYWyEu5jzTEqvB70C23vfOCrwIHK0F2txH2UQLVfMaiUSNqf5T71Dc7JF99uv5SUlSNwAD7NPsZE\r\nx-goog-generation: 1772727309333539\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 793183\r\nx-goog-hash: crc32c=YLAkgA==, md5=vRUpmTCmTiD0WW8KT8UBDA==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QB0%2BDx0zKFPWuQGLiXRfoQuN%2F7rmsLvNkdTypGMHpIDKEt%2F2VMESZyAdMxucQxMCrvj0o0%2F92JFgoVpa4KGZVmCggFdC2wg29UBuAnWc9IOqXF3nuQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 18 Mar 2026 14:16:14 GMT\r\ncache-control: public, max-age=604800\r\nage: 214889\r\nlast-modified: Thu, 05 Mar 2026 16:15:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\netag: W/\"bd15299930a64e20f4596f0a4fc5010c\"\r\ncontent-encoding: br\r\ncf-ray: 9dbff53a3f9a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793183,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd15299930a64e20f4596f0a4fc5010c","sha1":"d4e5d7e47ef729a46eaaa8df0c2980f37edd2d05","sha256":"43c09ec339e3ece06b609512a82cf85b7cbe5ad14f568e747938b31cb0c09f5f","sha512":"5dda9254f7fd919a1a84eecef9ceb1622fe0c13b00ca0544955fb2c4d50281e432a2529a440916fddef6e831a5991e763b123c6ee0489685ff4b7eb69cc980a3","ssdeep":"3072:1sR02NgiSbQ19PjJgfedq81KIzNdvWUxuktIo:ORAGjf1KarvWsqo","tlshash":"26f4356f1284083977bb5399d60677c759d9307e4fac18e9b89d193e07e41e33a2228f","first_seen":"2026-03-05T20:21:40.077034Z","last_seen":"2026-03-18T18:13:56.132663Z","times_seen":101,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/trustedIframe.html?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 00:53:39 GMT","end":"Fri, 24 Apr 2026 01:53:33 GMT"},"fingerprint":{"sha1":"33:C8:4E:52:C4:EC:A9:8F:F6:3B:78:94:FC:3D:D6:08:D6:C2:3B:20","sha256":"93:D4:2E:D2:B5:BB:6F:0A:15:79:11:19:B9:78:B7:47:A3:07:9F:63:12:93:B3:94:70:14:9B:3C:C2:3B:82:BE"}}},"request":{"raw":"GET /trustedIframe.html?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=3600, stale-while-revalidate=3600\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dbff53a48d01a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f77d48794f4cf7d955b67801a4bc5de7","sha1":"91765681fa7f30502552262227455351658c3d73","sha256":"45e7bb33c2377dca5746ab8e9287bf80549d89f27350eba4408f6c07289d33a5","sha512":"9d76eae7dbe4de9e3dd0629cb58bbf1a34d7e93e2bfa47656ee11e24387d0443cddb055f908ce0feac1790309461e4491301ea999919cafdc45645c298c938af","ssdeep":"96:OD5ZF5j5t30P3QV6O/v3JzbuX81BCTbvQQZL35Xb54W65TBu:O35B0vQV6S/Jzq71J6Du","tlshash":"6fc1759b28f454204257e0252a4bf422f625d05f36cedc54bacc78b57f8933d8ab1b8a","first_seen":"2026-03-14T02:48:41.603726Z","last_seen":"2026-03-14T02:48:41.603726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.5713866152858295","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:16.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.5713866152858295 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260517\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff55d7ed81a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/thirdparty/jquery-3.6.3.min.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /thirdparty/jquery-3.6.3.min.js HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OgsbOykfPyQrAopREzuBYeemuy%2FqhkxS0a6XHBNDlhQNVz3t8wFeuHict7H3gX1okZ7lGwNVWUPksPf3pvdvWD%2BqovpxksDZQ%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-15f5a\"\r\ncf-ray: 9dbff52d0be74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"30792621ca010e3c5d5f98162629439f","sha1":"9bc5b058a9e9fe3820484290bd0810681072e448","sha256":"448ef0632211ba18d7c1557a6d22250820ac3b4465ba2e73b7137f4dc4a31a12","sha512":"a11aa53ac62fbf37277796ffe2eb7d94c89ad60290861fa3acecf545d095ede4402c51399c6589956a002685cc31c2ff4854846c2719d280d69c9b33c3779f68","ssdeep":"1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQA:EcqmCU3zhINzfmR4lb3e34UQ47GKb","tlshash":"039318ddb2c6b06247a770ba407f610ff236199d684d4400f169d8e9bc78a4a827bf7d","first_seen":"2023-03-13T14:09:05Z","last_seen":"2026-06-19T05:54:28.077726Z","times_seen":3142,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/1.gif?x=1\u0026adslot=","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /1.gif?x=1\u0026adslot= HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncf-ray: 9dbff52f3fbac272-OSL\r\nx-guploader-uploadid: AGQBYWxmVE4B5vvKJ3CpSnr1EtD6N7K84LY0r-E485PMqMfGwkHY90DUk6LkOfG3Eqh8QvNZpjEyfx0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 19:08:45 GMT\r\nlast-modified: Fri, 22 Jan 2021 08:58:45 GMT\r\netag: \"d89746888da2d9510b64a9f031eaecd5\"\r\nx-goog-generation: 1611305925409947\r\nx-goog-metageneration: 3\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 42\r\nx-goog-meta-: \r\nx-goog-custom-time: 1970-01-01T00:00:00Z\r\nx-goog-hash: crc32c=ljrbyA==, md5=2JdGiI2i2VELZKnwMers1Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 113963\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:50:21.817186Z","times_seen":955496,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:53 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 127156\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T02:51:10.849834Z","times_seen":194339,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":18,"receive":10,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/css/exocet-blizzard-light.ttf","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /css/exocet-blizzard-light.ttf HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96620\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-1796c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTbHvHC4u%2Fr38vO6sr1j9N8946Nz3dra8nl2ROX4ErgH6W%2B%2BML4eID7NHJJa7i1456MnNh8V8HeyxLhr4B2zYOoJq7VRQBvalQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341ccf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96620,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 19 tables, 1st \"FFTM\", 19 names, Microsoft, language 0x409, Copyright (c) Emigre Inc, 1991. Designed by Jonathan Barnbrook. All rights reserved.Exocet Blizz","md5":"eea952e5025fd37aa0fc3d1cf782b32a","sha1":"a3d56b89a089f57ff2dd9c2b8e659f14b78f0e47","sha256":"754e738d05e884f0c3b980d0ad2512792d1d998ab267e8cbfc79df7f984d6be1","sha512":"ec4664ab3fbdb1106465a2bb4a2109418ee0161a508d1bf73f4b2f03e9a448b5f3f7771b8945605fa1ca3ae6a309c3a84ca7d6fb14919f980d1c9dd6daa67b58","ssdeep":"768:zEScBrrbcuN5UuNZQMPJdwzhdMGQMPJdwzhdU6AUX7ExYN6ka5KDRyD55vm6U75E:mN/bTAw4xYAkQU4b8G8qki1qxC","tlshash":"af934b8ce25b570cc727e8360e2120218adfc71ddf99d6b739c70ce6254bcb499b462a","first_seen":"2026-03-14T02:48:41.60997Z","last_seen":"2026-03-14T02:48:41.60997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/p?d=QhJodHRwczovL2QyZW11LmNvbS9aJDAxOWNlYTNlLTdmYWItN2ZiMC05Y2EyLTA2OTU3YjkzODc0ZWICTk9qAjAzkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQdhNDkxZTFjuAEA0AHtDdgBAeoBDgoIbWluZmxvb3ISAm9u","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 04:41:11 GMT","end":"Tue, 26 May 2026 05:37:06 GMT"},"fingerprint":{"sha1":"C9:06:33:67:44:BB:4C:10:67:C7:77:B6:7A:B9:56:36:EA:2B:AA:E2","sha256":"6A:E7:47:1C:87:CE:48:83:38:F6:D4:1D:70:83:FB:33:79:28:6B:00:54:02:1A:31:C0:EE:9D:7F:27:7C:FA:3F"}}},"request":{"raw":"GET /p?d=QhJodHRwczovL2QyZW11LmNvbS9aJDAxOWNlYTNlLTdmYWItN2ZiMC05Y2EyLTA2OTU3YjkzODc0ZWICTk9qAjAzkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQdhNDkxZTFjuAEA0AHtDdgBAeoBDgoIbWluZmxvb3ISAm9u HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":100,"dns":3,"connect":13,"send":0,"wait":141,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.3334181533641384","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:15.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.3334181533641384 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260517\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff55ad9001a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/js/dark.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /js/dark.js HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYuvHdSQHoMUArHVPYZtRQ1y3x2ordYnNiBmKRpfX0y42aNLG2VKhz6kHkP0jurleVqjUArAY4fFcB0XryvT4yyryxc516WdSw%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-512\"\r\ncf-ray: 9dbff52d0be94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"21e4a33c5596033c69a81534ea5f9a84","sha1":"de38178206d8f5e59fc5217e45ea24151451d75c","sha256":"7425986ba209375c269da2f886ba293c2d4b2fcc85dfce70c5e0e0892ee8d477","sha512":"eaf65b57e05df0aba845d0e0452fbe0ed92e1f69538fa3f06fa8e388f0d4d135e73cb5443637b6e3d9828d9c8d34c1488607eec86793c5486fc08c0a08de7d49","ssdeep":"","tlshash":"a2217b6b0cbb0a2380b6159d3b4baa0b3938008353059d657dcc54595fc9dd4d1f7b6f","first_seen":"2026-03-14T02:48:41.611675Z","last_seen":"2026-03-14T02:48:41.611675Z","times_seen":1,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-dclone.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-dclone.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 27747\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-6c63\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pW2Z2cp21Xf7Pbywgf%2BRINX6Bkn4BDT6wJcVPxZhNzOb%2FuqYiC9zN241hCX3VYtiV6IGIvzdp1%2BYVOKO26rDwmhKGwZcGwNOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341ccc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 609 x 169, 8-bit/color RGBA, non-interlaced","md5":"d3669854b796cd26bb625acfcd80acff","sha1":"4cd5e6ec9060bafc676ff83f819040a49d0e6ee9","sha256":"e2ac1169e5468c97aa65ab644682940e864caeabeedc7875b9f10ab90388a19b","sha512":"875b9f6b37fabca8480809a4c61e54139ffa74f56bdea83bbd4a74dd66e65d30edfe2bb21dbe7e12c44b4692581fac45a5b83c75e0d3b6d0ec459fc56910d50b","ssdeep":"768:L83uFN6DrZvM1VY7BTUnqmCNvj4r+ZTfncYnfo7:336Dr5MYFUlkjE+ZT47","tlshash":"24c2e18b383699cbcfd9d390691c06269587489bf649c00fb30d1b24fe149ebbe17682","first_seen":"2026-03-14T02:48:41.612672Z","last_seen":"2026-03-14T02:48:41.612672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/cdn-cgi/rum?","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 636\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: _ga_1DNME47EKC=GS2.1.s1773456490$o1$g0$t1773456490$j60$l0$h0; _ga=GA1.1.1478036948.1773456490; _nitroID=f769c27b3221fff6aac3efadd35596aa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":636,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1442,\"startTime\":1773456488117,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"16201102-3a43-49a4-a64a-9a2f00e2a5f6\",\"location\":\"https://d2emu.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":23,\"domainLookupEnd\":24,\"connectStart\":24,\"connectEnd\":38,\"requestStart\":39,\"responseStart\":139,\"responseEnd\":226,\"domInteractive\":1431,\"domComplete\":2054,\"loadEventStart\":2054,\"loadEventEnd\":2126,\"transferSize\":13997,\"decodedBodySize\":99602},\"siteToken\":\"0c7e0d79942a4c0384109665757063a3\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://d2emu.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5l7M9tjwXOo2kgDSqayu7WK8%2BwU1mns0y5e9EC5j38OMtgIMKQoy8cerQtbzrqPRoqdwGaANwXr7YcqAVl2apMPDDRUBcGmdQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9dbff539dd504e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,400i,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,400i,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 02:48:08 GMT\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27115,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"37066dd937ad7769930f4e7fd60ba221","sha1":"a5a87694892562ce6c30612de4afbe9d596dcdf2","sha256":"56f9631cadc098a9692adf375028319f3c4ab223913a405154c96b5a95e79781","sha512":"1f84a4e7ef973c8282a06145947c122880c2dd7284e5783155c1e499bd6acd5e9450baf275fd08e27afe313da10cd7df32c99c9c81209025fb2d23a9ca75d425","ssdeep":"768:VlkbrhE49q6IFZFCFHFHFY4FRLFuFWFMFsbbYSRv4wFMl22YfRiJhan6BBYERNeX:0YHIHb","tlshash":"0bc21ca10417544097834ce223cebe30fe1f92507142d0b5ebfd9b6baddbca652693ad","first_seen":"2026-03-14T02:48:41.613761Z","last_seen":"2026-05-12T19:10:10.276446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":167,"dns":1,"connect":16,"send":0,"wait":113,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9dbff52d39c723eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-19T22:04:57.976142Z","times_seen":78162,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":4,"dns":3,"connect":1,"send":0,"wait":12,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:53 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 127156\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T02:51:10.849834Z","times_seen":194339,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":82,"dns":2,"connect":21,"send":0,"wait":9,"receive":5,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T02:48:08.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvYHSm4ToH1Qg2s32NcaH9%2FcqN38ee6x2u6k%2BUcWqDXmWImhX27bt8sMAWGcqlWqjWSq%2F8yOrBqBC6ASqFi7w7VDZeD1W3uCcQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=91\r\ncontent-encoding: br\r\ncf-ray: 9dbff52b0ab04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.6.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":99602,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2312)","md5":"acd5ac10f0ea473cc4f10940ec6b07ac","sha1":"d3ca76157098bef7d578d5830890acd41d407208","sha256":"93cc2b5901d3fc5ca294433a18c3cb5a77029fdf512d0b93cd2153360b77ca79","sha512":"b32eeed19fcf8637f5b52932dea8bbfc5b022c1c8d918b9e96362854aaa051542655f8fc1b91b4ef6896f1dccce444c90b9980e426f48cf157a11b3ebac4bc35","ssdeep":"768:Ihln8+nVF1KMcaFAAo8+nVHI1hEcWABZIfIxeYTUPLD8+nVTcKG8ddzQ:cNLj1MaFANLNI1BWAheYYjDLyF83zQ","tlshash":"43a31aa887f486fda48a838de7347615af5b705bd6018638b3ad4b742f47d858c238dc","first_seen":"2026-03-14T02:48:41.615294Z","last_seen":"2026-03-14T02:48:41.615294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":100,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1DNME47EKC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=G-1DNME47EKC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\nexpires: Sat, 14 Mar 2026 02:48:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 152161\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459313,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"6aa45a1ad0e470fa472154ca09254848","sha1":"7fa2ed65530c4c1d405590ac3b92ba0039c64097","sha256":"925008946df73212ef6a2bf184e522eafd7285e1109df4f2099dae708b2b8528","sha512":"cc784086b077107ec7d07eb43802c4881399ce7e83b9487254cc8109c8aa3e579bbb8729673f8643286b463a7348b4bda275b753d36f7e95e0eb98348584db1c","ssdeep":"6144:FKT0k+98CN708voOE8cvQVsgXBGOYsVxueWpw0HpO9KT:63A8CNglOE89VkX3","tlshash":"eba4faceb3d674229396f478503f018ba57b29a2b45cc899f189cce42d7469a4237f7c","first_seen":"2026-03-14T02:48:41.616622Z","last_seen":"2026-03-14T02:48:41.616622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":171,"dns":1,"connect":18,"send":0,"wait":48,"receive":56,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10392\r\ncf-ray: 9dbff52d2c3db1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eebda3d-e637\"\r\nlast-modified: Thu, 18 Jun 2020 21:18:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1242803\r\nexpires: Thu, 04 Mar 2027 02:48:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dou8HdjfKbbWYLH9FM09kuNtQUCs%2F1EPtlOz5pwRlVuUWgP8HPG5e%2Bfh2GtflzfhBM5fTJH0MZ67sxQgYDyWaIsnMn%2B6cn3j3LM1qETTSvHrnakkpfsRfhglGHCYIUeLBkFLbpvr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58749)","md5":"870dbf9e3d22ee9d7cd21acc620e107b","sha1":"61e37af38389d10e3ec44b0f5f05b10978c23768","sha256":"d9716994f96b14296dd1b21d3e0a73f07ee88e7935d07ebdc51a9df7eb934a10","sha512":"c40e87a7aa1ece18dde8b88b6729eeba49bcd1ff01a19dcea5c1186aa2a8095dc72900eb6230c4d46bbca1cc60c685e6c264b33388aa3ef0ac3a440d8aee3518","ssdeep":"768:gEC31sPiyLNq4/xtoAbHJ2kEBR/MMQyYJIXtBjtF5Qzl:gE/PxLE4/v5HQpBCfOtBt4B","tlshash":"5543fbb8e54c01c9a731c44bff81b2bc61baf73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-09T11:48:45Z","last_seen":"2026-06-19T23:56:58.420596Z","times_seen":1555,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":10,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-tz-history.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-tz-history.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 77762\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-12fc2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vML1u58RoNe0TA%2B25d6R6xTy7k6cd9qYCr0FzBPvqerap%2F9PVBT9Au8qPAvMkM7RE0mprZ%2FOJj8GEPOmZc%2BSzVbEIJMW%2FWK9dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341ccd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1046 x 452, 8-bit/color RGBA, non-interlaced","md5":"bcd3beef0261ffd65358b4f238c57e38","sha1":"0d86eb1cb4847f1e62f6ce2e919aec8a7e7e7f85","sha256":"a690a7edc64d0e8c528337922c637de0f2333de355f9926d6372a988f09e1bcb","sha512":"40871524723c33dfef5c128a8458dc4181bbdda2e54614e10cd000b27d45e847625bd32aa27e1ffaeebcbc72443fd88963fcb23a905b1e36641d787e8484f751","ssdeep":"1536:AXg/Gn3gsff32K9DrYQljLbIIxFXdxf6dNp30KhoWYuHUfata4Uon:OHn3lfnDLlrIIxFtZeM4tYu0z4Uon","tlshash":"cd738c6713814c7417b89f9436cb4ec9989f747beb2f85a16f0723c2b9defa92521048","first_seen":"2026-03-14T02:48:41.618525Z","last_seen":"2026-03-14T02:48:41.618525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 01:19:17 GMT","end":"Thu, 07 May 2026 02:14:08 GMT"},"fingerprint":{"sha1":"CA:3E:FC:BD:D0:F5:27:B0:A7:61:0F:A3:60:23:91:19:25:F1:52:7A","sha256":"DA:67:0A:73:1D:C0:7D:41:F9:D5:4F:00:84:A1:5E:7B:55:FC:AB:39:8D:36:D3:12:AB:4D:FE:48:1F:77:99:AE"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-20T02:50:46.799701Z","times_seen":427534,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":138,"dns":6,"connect":26,"send":0,"wait":152,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.07869888388013313","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:14.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.07869888388013313 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260516\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff555bdce1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs-simple.com/openrtb2/prebidjs","fqdn":"ib.adnxs-simple.com","domain":"adnxs-simple.com","tld":"com"},"ip":{"addr":"185.89.211.84","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs-simple.com","organization":""},"issuer":{"commonName":"GeoTrust TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:93:03:3E:0F:5D:3C:DC:60:F3:0B:D2:4F:42:C2:A8:93:9D:65:29","sha256":"AC:86:20:31:09:6A:E5:52:9F:F3:85:B4:7A:30:47:34:2E:03:71:15:B6:50:D7:B9:8E:AD:49:2D:07:CD:86:56"}}},"request":{"raw":"POST /openrtb2/prebidjs HTTP/1.1\r\nHost: ib.adnxs-simple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\ncontent-type: text/plain\r\nContent-Length: 2561\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2561,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-right\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-right\",\"adserver\":{\"adslot\":\"banner-right\"},\"keywords\":[]},\"tid\":\"u78817ade-49cc-483e-a860-c3e85d81a3e7\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":160,\"h\":600},{\"w\":300,\"h\":600},{\"w\":300,\"h\":250}],\"pos\":1,\"w\":160,\"h\":600},\"id\":\"9cb12adf-85be-40c0-b967-41829dac9a0a\",\"secure\":1},{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-right\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-right\",\"adserver\":{\"adslot\":\"banner-right\"},\"keywords\":[]},\"tid\":\"u78817ade-49cc-483e-a860-c3e85d81a3e7\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":225,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"f5a5ff52-b554-40f2-9e3c-3b19f2077d32\",\"secure\":1}],\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"d2emu.com\",\"publisher\":{\"domain\":\"d2emu.com\"},\"page\":\"https://d2emu.com/\",\"name\":\"d2emu\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"680\",\"687\"],\"kwarray\":[\"Action RPG / Soulslike\",\"Diablo II\",\"Modding\",\"Emulation\",\"Private Servers\",\"Hack and Slash\",\"Game Development\",\"Reverse Engineering\",\"Blizzard Entertainment\",\"Game Server Hosting\"],\"ext\":{\"data\":{\"documentLang\":\"en\"}},\"content\":{\"language\":\"en\"}},\"source\":{\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]},\"tidSource\":\"pbjs\",\"omidpn\":\"AppNexus\",\"omidpv\":\"10.16.0\"},\"tid\":\"u2d2d51f4-4d80-4faf-b8f0-8132793bf46b\"},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQhDnIAQhDnIADyvWAENCVFAAAAAAAAAACiQAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"d2emu.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"68d8f28e-1da0-456a-b6aa-f07d3db9187e\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1}},\"id\":\"a3647b80-7af5-4f30-a6ef-bcf666f99929\",\"test\":0,\"tmax\":2200,\"ext\":{\"appnexus\":{\"prebid\":true,\"hb_source\":1,\"sdk\":{\"version\":\"10.16.0\",\"source\":\"pbjs\"},\"referrer_detection\":{\"rd_ref\":\"https%3A%2F%2Fd2emu.com%2F\",\"rd_top\":true,\"rd_ifs\":0,\"rd_stk\":\"https%3A%2F%2Fd2emu.com%2F\",\"rd_can\":\"https://d2emu.com/\"}}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.5\r\ndate: Sat, 14 Mar 2026 02:48:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://d2emu.com\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nx-openrtb-version: 2.4\r\nan-x-request-uuid: d9c632af-add8-4b8e-9f3c-f881efa54004\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4650,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"054f6aea9d0d1694a651e7be290f8c06","sha1":"d4754bd6f60436f26d4ad245e48c2870470b0c3f","sha256":"1533b99496aa29af4c3973bf5d6850d25e842730f0de2d94145871a7328affac","sha512":"74f58f345f0bad377f7cff0868ea97e6043fabfb71b6d5b44d6403465b61ea33a4f04dd3884c0555585c6a589e92e4408fb55ccd4a1ca0878c6ffdf8f9ed7926","ssdeep":"96:NQqj/r9W6PGMP6kOaMC+CDGF+9OF+laorpTyZWV3SQDnDMA:2o9WRm6Da8Cg+AFIaorpTyMDnD3","tlshash":"70a12932ab19b842a2c62a2b8176747d9d732f03efae95ed86dc1256110c84d5b385e4","first_seen":"2026-03-14T02:48:41.620232Z","last_seen":"2026-03-14T02:48:41.620232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":85,"dns":25,"connect":17,"send":0,"wait":136,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/api/v1/private/auth/status","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /api/v1/private/auth/status HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGdJXCXkmznTBApiJXX6%2BgWcItz%2FeBksqH4XtV69Lodrt65jJ69D3yGqoSpbMm3GXS98Pzqe08%2B8g6zJb8y0VSK71Q%2FsmVPM8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5338cbf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"46a4553c730c1542e4087e393dd783e6","sha1":"ee34222d20cc2b26957769d8b597970d3ad41025","sha256":"79612f4ecacd4594b5352a208b908db19e27b5f67be1dba726aee76ed1bcebd6","sha512":"568ff20367e9d911e55841fdedc8b774ca95fc6a70c256846000a6e0e07e9a9e45e08e7933ee8f8779f245d2ae3fb57d9ae3446245cb7c5556731351ab1bd5ed","ssdeep":"","tlshash":"bd900444cc44045c104114514d414f0735000d503115304cc0f0d01c74c337c0cf7c01","first_seen":"2026-03-14T02:48:41.621224Z","last_seen":"2026-03-14T02:48:41.621224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/tag?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"104.20.20.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 00:53:39 GMT","end":"Fri, 24 Apr 2026 01:53:33 GMT"},"fingerprint":{"sha1":"33:C8:4E:52:C4:EC:A9:8F:F6:3B:78:94:FC:3D:D6:08:D6:C2:3B:20","sha256":"93:D4:2E:D2:B5:BB:6F:0A:15:79:11:19:B9:78:B7:47:A3:07:9F:63:12:93:B3:94:70:14:9B:3C:C2:3B:82:BE"}}},"request":{"raw":"GET /tag?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9dbff5397f521a30-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: public, max-age=300, stale-if-error=3600, stale-while-revalidate=300\r\netag: W/\"75182f8ce83b98b3933e3fa2843a21cc\"\r\nlast-modified: Sat, 14 Mar 2026 02:43:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, X-Acceptable-Ads, DNT\r\nvia: 1.1 google\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":152852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65408)","md5":"10f8b210e3b527b46d66a9f6e60e0727","sha1":"56a96700e17cd52ff30a8ec49754f0732a7e7923","sha256":"e610f7e15aeec2af6020fb936f48365e51605faa21f5e4baf77ab892cf236843","sha512":"e3a36f8e6767a4d2a5be459e41d5435b04e4460bcd24f3888490462f2ceb5f353ad0deb1ae72478d68ea3aabc93a7f89287075b01ca822de0d089d08ea676c38","ssdeep":"1536:BVCz++xrpLobuFsovdKtO7mmiSpVqcQeHqusoygySRiNmZX:6NoeKtOqepAeHqusoygyScN2X","tlshash":"4ce3728db66065fe46ce8255c1263b025f6c356ab687b840fc0f5e8238ff5ca243597b","first_seen":"2026-03-06T08:58:33.617295Z","last_seen":"2026-03-19T19:43:44.639918Z","times_seen":25,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/cookie_sync","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:37:36 GMT","end":"Wed, 03 Jun 2026 00:33:31 GMT"},"fingerprint":{"sha1":"80:C5:F5:7E:3A:20:AD:65:23:E0:16:27:C5:DC:6D:AD:59:2F:6B:46","sha256":"DC:25:88:CD:17:DC:ED:84:33:7A:26:76:44:E3:30:BF:F7:6D:FE:ED:AB:F4:B5:12:78:9B:5D:31:CD:C8:0C:FD"}}},"request":{"raw":"POST /cookie_sync HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\ncontent-type: text/plain\r\nContent-Length: 313\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":313,"data":"{\"uuid\":\"8e75ed7d-37c0-43cc-b3b9-f4ad97b58aa5\",\"bidders\":[\"appnexus\",\"openx\"],\"account\":\"1\",\"filterSettings\":{\"image\":{\"bidders\":\"*\",\"filter\":\"include\"},\"iframe\":{\"bidders\":\"*\",\"filter\":\"include\"}},\"limit\":5,\"gdpr\":1,\"gdpr_consent\":\"CQhDnIAQhDnIADyvWAENCVFAAAAAAAAAACiQAAAAAAAA.IAAA\",\"gpp_sid\":\"\",\"coopSync\":true}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://d2emu.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\ndate: Sat, 14 Mar 2026 02:48:20 GMT\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6291da4d85da80d3f192b84b39eae62","sha1":"2bf85d0e268c5343ef71bb11399db3dc594ba1eb","sha256":"57ce2b08ef8da65d0f5627d6e41c7725efd32d3e377dea3c91025a375ae93fdf","sha512":"10fac6d4d5714848db12ec3d5ee8ff080c3934334f9044da6cfa6d30707de22b140ccb9b91048c3e198e9d3afa3e46c0c41f0765118e38fc663c98f1e0277142","ssdeep":"","tlshash":"91900201200845180a90045444040ab52a950d40142f40b8050c6066064659288c8512","first_seen":"2023-04-06T16:04:44Z","last_seen":"2026-06-18T01:53:27.559816Z","times_seen":2641,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/thirdparty/darkmode.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /thirdparty/darkmode.js HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRXjIr1rx0VARnZQeaddtVfruKbOZhyh7pRvSqGFaI1jEFyQCsCu0X5ec%2BSP%2B1AzOuYJrlnYo%2BdoXYYm5dxXRcqQzhSRC7bTXw%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-18c7\"\r\ncf-ray: 9dbff52d0be84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"85f9d731929b326bb61fd26ea1f87707","sha1":"36a0a9226a92f213cc803c05d86677bef4d69552","sha256":"22f2ea9a07bd88632716cafdbefc358173c6e26e2bb3965b23de213d6fb219a2","sha512":"3710bbb8879a428899c4584513590e9fed99a6722a57806860947b271086ec9c67a756d10392f28bdd65e7386e613166853adc6c653509ba93fc78a32eecf027","ssdeep":"192:6qnumfdgLaTjqgp6QtNvbWgWpcNkc1sVkxLFpiPX5ypeMwDQKyC:pO1gRtNtPR1fLFOUv+","tlshash":"bad1316860b71e3742b340d65be35b417738a043a01afc54b9cda6dd0f8a288dd63bdb","first_seen":"2026-03-14T02:48:41.629978Z","last_seen":"2026-03-14T02:48:41.629978Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-tz.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-tz.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 35998\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-8c9e\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98%2FIGb9Oi2gWFt0TZLmVeKYJD0Bw1kJPULJhzOvLGp6croBm1KRENvqmHkuOpVNsZVCxn78apJ96QP7e9O5al1Ivi2pyytKWpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341cca4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 444 x 167, 8-bit/color RGBA, non-interlaced","md5":"b2a66b734a18df40a9c58e737ab876ce","sha1":"76c9aeca151953dd2dab574d92d8668d2943eec4","sha256":"13cb4ef49c2d0d3b217ea167ef28affdc5f23acfd78284d74b1ae3f47236120d","sha512":"70abd7674e34d954fbd204b87f237c7c7d9527facf68acd8f08a31c8f88fb0d3db3ea3a19236ec6593cad798f5c70aa01a916e6c7745775ae70039e624c61421","ssdeep":"768:A83uFzd6v5cK5s1RNZi6mLGmZi6/iDcgrZagJjjBlzlK/b:+n6vAVbmimZi6/iDcgn4","tlshash":"16f2f2e37972ff51a360ce7a4dd6d99ac4f7a195ed8089c73b401afc6a5a508380b31c","first_seen":"2026-03-14T02:48:41.6319Z","last_seen":"2026-03-14T02:48:41.6319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-tz-sp.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-tz-sp.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 14679\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-3957\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWOSANEHnwnmgPG2gfN%2FPwXL5qxgmTUbB3k0YaqRRWtrJDDJFWesBuNk97SvoQbwdNkrzJMHYVDxDEvuGpFtFXLimR%2BN6LMxKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341cc94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 169, 8-bit/color RGBA, non-interlaced","md5":"ac026c66367531fd3e86887860db4ba0","sha1":"7836574115b9a397c1a31d0ec7620095cdc77444","sha256":"d8d596f6e0d983df1bf522d62034b0953cf070a6cde57a4edf1a62d8e6d3c6f5","sha512":"720d800cd69938530435b7efb5bed3d1587dc2c1dbd5ff590be91ca8a7cb67c6cfc43be1011294f1975887a6f15cc973745bba276f696c5445e7b2d2977ada83","ssdeep":"384:R8jLozNqUC7ycJqiqJ7T1+E7ERFCxVVRS1rSwWY:R83ujwHqJ0Ek4VVc1r1","tlshash":"9362d0e734beeb7aab91dc120cb0c68cc6052c854ee1a556bfdd21a20f527922e020d9","first_seen":"2026-03-14T02:48:41.633126Z","last_seen":"2026-03-14T02:48:41.633126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/additional-consent-providers.csv","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"104.21.33.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 20:47:17 GMT","end":"Thu, 30 Apr 2026 21:44:39 GMT"},"fingerprint":{"sha1":"EA:64:B8:9A:65:A9:56:24:D8:4E:9A:BA:6E:99:7C:A9:B1:2D:1C:8F","sha256":"25:5C:09:2E:BF:96:BA:2D:3C:4E:E6:2C:C8:79:60:58:AA:97:D9:86:D1:E2:34:DC:30:A9:3F:A9:78:BF:42:0C"}}},"request":{"raw":"GET /additional-consent-providers.csv HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: text/csv\r\ncontent-length: 109172\r\nx-guploader-uploadid: AGQBYWzE15MkRWdRPZTxmXvOLguSI1E1S46ZuQt2ZOxWmudr2_gJEibM4IteZY3x0GFSy5Wn\r\nx-goog-generation: 1740499050366347\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 109172\r\nx-goog-hash: crc32c=46FWvA==, md5=C5ebpuopeCk4sUi4/a0dgg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sat, 14 Mar 2026 03:17:32 GMT\r\ncache-control: public, max-age=3600\r\nage: 2888\r\nlast-modified: Tue, 25 Feb 2025 15:57:30 GMT\r\netag: \"0b979ba6ea29782938b148b8fdad1d82\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTOHvHiJpjGE09OuBZ4hGDLsUcJbE%2BVFNyvPSd%2BADOX3YkW9Z5S3DDlS%2FSQpXk4bhg5%2BAFt8I%2BdtU4Z7XcCKegA1Dvst2w4M8Vop%2FTdXakGi3H4dzg%3D%3D\"}]}\r\ncf-ray: 9dbff53a3f938be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":109172,"size_decoded":0,"mime_type":"text/csv","magic":"CSV Unicode text, UTF-8 text","md5":"0b979ba6ea29782938b148b8fdad1d82","sha1":"7bca27fc650b8d19ca89858e78db11884b0440b5","sha256":"e476ab4a8be9030adc26a696199faae8701289ba6c25a9c9465bfda00987f705","sha512":"9f02e60655b048eda854b22db620d1c8e7ebbd1e4e25eb44c0ee96ee12e7defd999b23b21f6799692db0b95f1991d038f43e8c19c4dd60664df488fd73694f1b","ssdeep":"1536:Ofu2YtuSGzMTaUWcvRfWnosn7gDP8aOXHMCPaLtj1kfTSXopyPn7o42ad:YYrGzFcgnRn7gDDOXHMCPaLtjqLSXrB","tlshash":"e5b3a67f8441d22c4b7441ccba7fa34cb5ca116fa9e9cefbcf94841656827da30586e8","first_seen":"2025-03-01T19:40:51.861483Z","last_seen":"2026-06-18T01:53:27.478268Z","times_seen":2838,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":30,"dns":4,"connect":1,"send":0,"wait":24,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:13.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:53 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 127160\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T02:51:10.849834Z","times_seen":194339,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.2871474605033161","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:14.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.2871474605033161 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260515\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff550aa761a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.9163079468784351","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:14.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.9163079468784351 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260515\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff551ed111a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%20Mono:100,300,400,400i,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Roboto%20Mono:100,300,400,400i,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 02:48:08 GMT\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ceada27599ced5802ec2073d97874f4","sha1":"bed891f9d7c49abcd7c13b14d6f7733e83e466be","sha256":"5bc50ede876653de5df1dc401397427a4e3d39f6c588b67ee8d7a08dc4b30cba","sha512":"a52a87af1984363306cc6541a9def8a90efff08639efff09e081ed8b892e0fc6a5f48d45893741624a17bebf48ebf8d15b6125ebc758bcddfb6f535059ec227a","ssdeep":"192:FkNf61kNfbkNfm3OkNf1kNfUTkNfq7NV247NVP7NVW3v7NVI7NV6q7NVwNV2INVX:Fif61ifbifUOif1ifOifqBV24BVPBVkt","tlshash":"9c22dde2442a9810a7832cd663cf7e35ed4f6145a186d239dbfe286cace3c72235175d","first_seen":"2026-03-14T02:48:41.634764Z","last_seen":"2026-03-14T02:48:41.634764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":158,"dns":0,"connect":29,"send":0,"wait":53,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/css/styles.css","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbGn6EkdO%2FGCwSQ6VxsH1CBme6Dwe7JiLD1KEq97Q1ukdgYTw1Uf%2B3aTW4EZh0%2F%2B9L6%2FuymwVOaxwyHWuDoljWR1JRnwP8M%2Bxg%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-c8a\"\r\ncf-ray: 9dbff52d0be54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"24564161c61e3db6e8f66d90d014e8dc","sha1":"32754277b53761172f8478eeb76946810448ca3f","sha256":"df14cd4ad2d9219d94254081de2a6ce6e024a2f95b55765ab849ea98c0f70a05","sha512":"7b0dd118c5aff1b860fa714d89a8d1bd9b8317b09414821d1327b8f1f516d2aa8e05f0fa73c805eba322ecbc0df96405c32d2f13e2c1629c9f58f235ca09e7b1","ssdeep":"","tlshash":"a26164e81afd0908654bc0457662c320b31e90cb910fddbc7eed124cbfc9690a76a38d","first_seen":"2026-03-14T02:48:41.635628Z","last_seen":"2026-03-14T02:48:41.635628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/js/auth.js","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /js/auth.js HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXCS3dLORFK%2BVJYMIfyu7j8WC522eCDHe0mf%2BsPq9r9qspbS55EsLg0QhHpTlSovcERC51eU%2F8qwzwwCF9WP0XF7E10IkVbi%2Fw%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-13e5\"\r\ncf-ray: 9dbff52d0bea4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (484)","md5":"68ef301ccef67b07de88128a8981e7f6","sha1":"d553f7fe9ceda16896be7e8b82e116a27e263d83","sha256":"562e73b8ea98cda6cf83358be5c57912eff683a725f39ccb85fe4055cd19c000","sha512":"90a27785ce034912e1e8f17994f2f964e5b1141eee4bee77469e9d34a1ff2c1c85ac06c7c7b43ea8f43d46603bc34863a66c6c76a40c5ae6daf4c49703be462b","ssdeep":"48:N/PP35ATwLquP8UNZd6wgfjNyw8Dt0+VauaOFfZvttt7/1pjHWbU8SLIWrH1FL7W:NhcWFZLGN5GVauaOHx//TpPLUo90fzV","tlshash":"19b1231ee9970527142360edf6e7a316bcb61003600ddd18799c9a893fc2e5865f3ef6","first_seen":"2026-03-14T02:48:41.636473Z","last_seen":"2026-03-14T02:48:41.636473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 103585\r\ncf-ray: 9dbff52f6a2db28a-OSL\r\nx-amz-id-2: TnyzkhTA7dkyyhclFrenv/GYBGMWg9Ebds4qcGvsHy7o1GyUR/FWQ4yizb9vm1GgxjGFwgDhvhM=\r\nx-amz-request-id: WBXJ0MFMG4E06GZP\r\nlast-modified: Sat, 14 Mar 2026 02:41:53 GMT\r\netag: \"1aa0426707deeb3541eefae214da2fa2\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 279\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519545,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64217)","md5":"766353cbe7104951eea3cf5f814da375","sha1":"76b3856cf57a9cf23d6a6417abb43ed37c6beedb","sha256":"2de2d7be42a8c34703ce9fd140c491a79d6f78f0e1b9a57ea1aef3bccf05d6a8","sha512":"c3fedeeea40ab072d0a12a58458d9ddea11315939e797f4da30ae4e26b16de32fbd331e55dfb6a150a10ad9b52a58d2a24abef83e50365eb974ac726d536dfe9","ssdeep":"12288:RDTCeJvWi2sCKKs683Lb1FpJOLq/P3eAn:RD/nbOK","tlshash":"a5b4a11f095f202cb6723ad7abaf5d5055dd21cb6eedc654e3923f4c034a7122e2b868","first_seen":"2026-03-14T02:48:41.637253Z","last_seen":"2026-03-14T02:48:41.637253Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":9,"dns":2,"connect":1,"send":0,"wait":9,"receive":5,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 80328\r\ncf-ray: 9dbff533b85e4e4c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eebda3d-139c8\"\r\nlast-modified: Thu, 18 Jun 2020 21:18:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Thu, 04 Mar 2027 02:48:09 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ewf6FN0XpHhonCV08VR4R8YkIbJYTUqBFi3TbfgB%2Fg1neri8d%2FhP%2FtuL2L9TRyF%2F1w85Bmcj7psVxVFitvQWVUWGijp0ZpZalHql%2BcMAI08lxaBTnG%2FX%2BR3hoh4lj2ZpNSjn%2Bo02\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80328,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 80328, version 331.589","md5":"412a43d6840addd683665ec12c30f810","sha1":"f3be6605dbff23cf22ec3abddd1141a81a99e3aa","sha256":"0bf1b8d8ac1b4ef0caea0db8cbe1b6a35f8a84a2f5fffa2421936cc11a1a91fc","sha512":"aadf26f3d595c0b3c9cc1f2a762559b37ba9fa0be055e8128dfa98005510ea7e2ae412abe9af7d593034d1b9126be542d7bad8d986b0128f2c2dffc6b71ec66f","ssdeep":"1536:Yfry2m5ogN0SJFfJpaz+AbNW6iGKY+aNHUO4dhdx4LxfGhRf:YfIoguYjpa3b2GKYN0N0f+f","tlshash":"cd7302dcbb83b68bb583370f2e9c59615695080de0aa11e252e5eccc0add36ed175cce","first_seen":"2023-04-15T16:03:12Z","last_seen":"2026-06-19T23:56:58.427686Z","times_seen":1876,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-arcspan.8fc7578a2d00f8aa7a18.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9dbff538e995c272-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 113965\r\ncache-control: public, max-age:43200\r\netag: W/\"cbe2f3d8d7a18d0914dc44bd15c0d5df\"\r\nexpires: Fri, 12 Mar 2027 19:08:44 GMT\r\nlast-modified: Thu, 12 Mar 2026 19:07:55 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1773342474950274\r\nx-goog-hash: crc32c=ANbcIA==, md5=y+Lz2NehjQkU3ES9FcDV3w==\r\nx-goog-meta-goog-reserved-file-mtime: 1773341376\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 652\r\nx-guploader-uploadid: AGQBYWzJqqlhsXm0-neoLzePs5buCjhHv4kZMCXcmMpxXYpvsFijEJt9QNrxuIGrw7e7ZS4gxwiT0eo\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":652,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (652), with no line terminators","md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-06-18T01:53:27.569923Z","times_seen":526,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/lang.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:12.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/lang.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1887\r\ncf-ray: 9dbff544afebc272-OSL\r\nx-guploader-uploadid: AGQBYWyDMeND2JwWVn85buQqY5G-v4rgZmXW8rsfwdtkh8c4bZ50yXK2fNEfrX1yTv0f7Dk\r\nx-goog-generation: 1666344058779792\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1887\r\nx-goog-hash: crc32c=7x+tRA==, md5=ygcqOWX0miwkLEXVNRY6Uw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nexpires: Sat, 14 Mar 2026 03:09:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"ca072a3965f49a2c242c45d535163a53\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2350\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 23, 8-bit/color RGBA, non-interlaced","md5":"ca072a3965f49a2c242c45d535163a53","sha1":"365e8c94931edd4bb5548861d856390662fc39bb","sha256":"eda5ec1c59939f001bdc15f557f3a905110aac0a60afc5a1eb92d8cdc2d2cbb5","sha512":"55d24b34455ed2ee5ee5cc07fe9b51fec9fbe02e29d97d775cb1529231b28d574f913b8f2cb354551c736ffcc1633d25153ae487f487a7c3daa445cd06317ee7","ssdeep":"","tlshash":"9c411b19e4002d406744f92259d215239e239c12abc0e253bacfc8732cb3bf138769cf","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-06-17T12:44:58.354552Z","times_seen":3081,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/logo.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:12.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/logo.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2592\r\ncf-ray: 9dbff544aff3c272-OSL\r\nx-guploader-uploadid: AGQBYWw2Zxa_RDS1FI1GYcrHgL3ACHUtQmnxN3QjUHzuS-v3Yq66h9g8C9LADrI_t0GL6PaMadUR_Cc\r\nx-goog-generation: 1666344058842900\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2592\r\nx-goog-hash: crc32c=naGVVg==, md5=lAqluB6Zu7dBSsxHSom62Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nexpires: Sat, 14 Mar 2026 03:09:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"940aa5b81e99bbb7414acc474a89bad9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2350\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 62, 8-bit/color RGBA, non-interlaced","md5":"940aa5b81e99bbb7414acc474a89bad9","sha1":"e19998a580400a11fe57b72acb87e6eb27fbf1ee","sha256":"6d8fea63a817b75ec9bfbc153b60b576dd31392e4d2afbec0d83cc813f8aca4d","sha512":"5ded9bdf3259435ed290332bfce4fdb22ec1cde73fa812f809b0640d5111bbbda2e929937b935940e624e5a3b1e165b2281cc7b73bcd4955e2bfd1b3f4cae4bf","ssdeep":"","tlshash":"23511a8fa121b483b60d89617cf652a3ac5304d4ca919d63edcd8c3918e147746e57c3","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-06-17T12:44:58.343182Z","times_seen":3079,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/css/normalize.css","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpT%2F5Mv%2FBY7GsHiLuMo8PBr%2Fagf%2FeM8INn1TMLGXC7VkJkeRVyI6CNj35eskq9VxtZOlRB7Gdj%2FazV1n8EK3Tjo9u1byht8y3w%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-17f9\"\r\ncf-ray: 9dbff52cfbe44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"144638bbecf2df0104777b82dbd32ddf","sha1":"8b6cd89a691833ec86f6bee54c825ce32964b15a","sha256":"5838f522446a1e7c42bb250c02ea2b683a2d3aaf4e222afff98316fdb592e1de","sha512":"3b763e7faa892e463ed782f3de16dd303b4c2064aa2db481df7121590be918500c08a29d75af3617e708b93b807b8b4cd6ae5d60b74c36ee2b2d77906584791a","ssdeep":"96:FIrs38+a1Dy8lDOhEg3p27oS5tdnCC5wBGeJxmnJnWHO1l:FL38UEg527ogCdBRKRWHA","tlshash":"79c141a117206f2282a60d38776f978a73040127867c3cddb4a262e9cf45b5dd769bce","first_seen":"2023-05-18T05:47:58Z","last_seen":"2026-06-18T20:00:06.434777Z","times_seen":246,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"floors.nitropay.com/f?s=1773\u0026c=NO\u0026v=2","fqdn":"floors.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:37:36 GMT","end":"Wed, 03 Jun 2026 00:33:31 GMT"},"fingerprint":{"sha1":"80:C5:F5:7E:3A:20:AD:65:23:E0:16:27:C5:DC:6D:AD:59:2F:6B:46","sha256":"DC:25:88:CD:17:DC:ED:84:33:7A:26:76:44:E3:30:BF:F7:6D:FE:ED:AB:F4:B5:12:78:9B:5D:31:CD:C8:0C:FD"}}},"request":{"raw":"GET /f?s=1773\u0026c=NO\u0026v=2 HTTP/1.1\r\nHost: floors.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-length: 26\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-20T02:50:21.785067Z","times_seen":714741,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":104,"dns":3,"connect":25,"send":0,"wait":175,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-chest.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-chest.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 90272\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-160a0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mkSoCKQWLL1%2B9X8bM%2B9kWs6TC2%2Fib9bHhRxdy9xOe0xyUEyujM6CDnxUwxhBZ09gBXW8K6BAl0dlgdYwET6emrLnENiH%2FJP7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341ccb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 852 x 310, 8-bit/color RGBA, non-interlaced","md5":"740ce18e6c06b083f7f849af5b6fba5e","sha1":"65ac3709306f26a76f0283035826d66b61f25c9f","sha256":"ec59fae7c6074995ca24d725e0cc10b015d6f932d330d1e3c4d10a7364558796","sha512":"a91d3435398122de1285d3e40ecdb6d39637e95dd8694e83000121ddb5062e618fb3f572a2743269bebee486054ada9d768b440a9b79019034076952d1c1e380","ssdeep":"1536:eBZZp0Qjum9pZa1scPcOO0Bap7YEEe4dAbynOyYMhysf4aeU/A+EvDW1T14Z:gHp0Qjci+cOOFp7YTe4d8Roysfgj+Evp","tlshash":"8793f1939a940d6026ff91384ab60d0e9f41846852d0dffd28370bf6bd782aef4d465e","first_seen":"2026-03-14T02:48:41.640976Z","last_seen":"2026-03-14T02:48:41.640976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/favicon.ico","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wq%2BX4TznGLwtrtwTc4kTRSgse8mF941YRER29AABoB%2BXmkbz7Xy%2BDh96RfJIwyUrNuZX5mnLi9zeUFbGKHAHagC9%2BBS8agu6eQ%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69b3803f-3c2e\"\r\ncf-ray: 9dbff536bd084e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"36a9d5131e2fe592394904adefa34c46","sha1":"f168b4e8b0cf8547f233be8ec47cf97f8c37f46a","sha256":"1d12d047b9b4dc8bfd76999baa21ce321cb1dfb6aa458c384c317c9b54e4bc53","sha512":"f6b2d21c8c93fc58614d03db4127980025c2c918856f49a913d6f3bbefda4a5f323019c2f3e830162e5f82f51611dfc3f7f6aee8030023e989cde377652f3058","ssdeep":"384:dVD8A47drRiyBgBETsvo2WxLkEPeruyls:dRMxRIqTsvo2WxLPGCy","tlshash":"28624a163b535817c9693e7a48f1ff4c45f983c0ad73c113af261a98b920ea8e9951ec","first_seen":"2026-03-14T02:48:41.641766Z","last_seen":"2026-03-14T02:48:41.641766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-captify.2015da149c7dcef90582.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9dbff538e998c272-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 113965\r\ncache-control: public, max-age:43200\r\netag: W/\"a84a120fe9e7fc2d94e23f9507c5d848\"\r\nexpires: Fri, 12 Mar 2027 19:08:44 GMT\r\nlast-modified: Thu, 12 Mar 2026 19:07:55 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1773342474945874\r\nx-goog-hash: crc32c=5Q7mFw==, md5=qEoSD+nn/C2U4j+VB8XYSA==\r\nx-goog-meta-goog-reserved-file-mtime: 1773341376\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 892\r\nx-guploader-uploadid: AGQBYWxevjvcZVp5bahiR6tnngLnnctqqZb0MtbL4ExvC5e_DVi9oUZpPNwu089by2WmYldXmYFlAQ8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (892), with no line terminators","md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-06-18T01:53:27.585227Z","times_seen":447,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:13.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 00:01:44 GMT\r\nexpires: Mon, 08 Mar 2027 00:01:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 528389\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-06-20T02:18:48.403419Z","times_seen":10879,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.8150893073667016","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:15.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.8150893073667016 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260516\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff5584bb31a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.29257855431169655","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:16.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.29257855431169655 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260518\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff5600be61a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/landing-page.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/landing-page.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1983568\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-1e4450\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c07yoJoqZyIW5%2BHW4uPN7Vtf1f7OGWz4ftu%2FAbLM6XyumG%2FfYCUO2mv6h3U4oa85yP%2FhBlJXLPp9o6stNFo45oqEBuvvtCUvWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341cc84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1983568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"be490764673831dc936bbfc7bc0b12e9","sha1":"14b7ddf3d698cfdc739b71b4424a8fa4e5f784ac","sha256":"c3dbaed58d32927625c517e3c251832147c87af1e06f66dfb48fcab164acfe9d","sha512":"8d56236e71c15aa3557392b5834c38990aeaac4bd34318c57b5c87bbd64a992ae00b9a32593946dd124f5d9477b418e977ba8ad08df84ed849d70f0fd1dacd1b","ssdeep":"24576:u1KMydf4bS09MynDVWKOknowS1aTGISS02w3q:u1KiblnDtOkowMa6I5093q","tlshash":"cd2533fc71561d79e44ccb37808a6153d6a42791b9ae18afa8f390517ec1f22fa4b01f","first_seen":"2026-03-14T02:48:41.64386Z","last_seen":"2026-03-14T02:48:41.64386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":189,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/cancel.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:12.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /cmp/cancel.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1302\r\ncf-ray: 9dbff544afecc272-OSL\r\nx-guploader-uploadid: AGQBYWy5De9Bl5p5wTXD5cilu8OdPffTVB8k0oL3c45oOEgt1EekvZ-cHLssQIzSMyB2p2s\r\nx-goog-generation: 1666344058825998\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1302\r\nx-goog-hash: crc32c=QrhBNA==, md5=xwey1QGlO8LGbpjk5cq++w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nexpires: Sat, 14 Mar 2026 03:09:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"c707b2d501a53bc2c66e98e4e5cabefb\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2350\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c707b2d501a53bc2c66e98e4e5cabefb","sha1":"428a51cba1d520eae0c90de0cf367fd0ea0b9622","sha256":"89863d0411e5273c7c2befe50bceeab57034e26b5df8751cc13c3bd78c73511d","sha512":"e8efac1e9234f7257b67623921c485d3d05c2160937276971ecf6b4ccd57f6f2842a507639b67b9dfbf3902c65e66fc0e3cce9d0cf22aad11a31b6f1abbe1560","ssdeep":"","tlshash":"c4218089ddd029c3b909ddc220fe50366a2349e086e8d466b9ced01a08771a50db4acb","first_seen":"2023-04-16T23:52:30Z","last_seen":"2026-06-17T12:44:58.368464Z","times_seen":3081,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:15.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 01:19:17 GMT","end":"Thu, 07 May 2026 02:14:08 GMT"},"fingerprint":{"sha1":"CA:3E:FC:BD:D0:F5:27:B0:A7:61:0F:A3:60:23:91:19:25:F1:52:7A","sha256":"DA:67:0A:73:1D:C0:7D:41:F9:D5:4F:00:84:A1:5E:7B:55:FC:AB:39:8D:36:D3:12:AB:4D:FE:48:1F:77:99:AE"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:15 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-20T02:50:46.799701Z","times_seen":427534,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/country?o=6278260873756672","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:17.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"GET /country?o=6278260873756672 HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600\r\ncontent-type: application/json\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:17 GMT\r\ncontent-length: 37\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bdfe458835550c34f45fc9fdfeebb12a","sha1":"0f08aa02e7bcbf4c5e991a5defb2fdbd03a86f3d","sha256":"ad26ec64cc613fbfbd47faaf39f9921c2b19769bde1d3c5c2857a671e7863cf9","sha512":"b35ead78688d8dc972f767a1f990afc5c4c3f5e5a6fd61ab09b256afb6c261b54841a77fba54a69804fde2aff36116c054fbf4cd41f17dc7f3d5e6031ce180b5","ssdeep":"","tlshash":"3e80040510305d4c4c51414411033101004cd531f105d015d4c73514d3430c44430040","first_seen":"2024-04-13T09:55:46Z","last_seen":"2026-06-18T10:23:25.455655Z","times_seen":20819,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/pv?nlf=false\u0026tid=Zetk4NQr-M9kry0eVoO-9cea3e8051\u0026sid=aXPGu1B9y-GzPna8ys3-9cea3e8051\u0026cv=2.1.184\u0026upapi=true","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:17.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"POST /pv?nlf=false\u0026tid=Zetk4NQr-M9kry0eVoO-9cea3e8051\u0026sid=aXPGu1B9y-GzPna8ys3-9cea3e8051\u0026cv=2.1.184\u0026upapi=true HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nContent-Length: 1140\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1140,"data":"{\"w\":\"5177240064622592\",\"o\":\"6278260873756672\",\"widget\":false,\"vr\":{\"w\":1280,\"h\":1024},\"pageURL\":\"https://d2emu.com/\",\"spa_view_change\":false,\"un\":false,\"r\":false,\"br\":[{\"name\":\"ad-delivery-ab\",\"type\":\"url\",\"signals\":{\"ab\":false},\"meta\":{\"attempt\":7,\"durMs\":6461,\"responseStatus\":0}},{\"name\":\"doubleclick-ab\",\"type\":\"url\",\"signals\":{\"ab\":true},\"meta\":{\"attempt\":2,\"durMs\":232,\"responseStatus\":null}},{\"name\":\"bt-legacy-bait-element\",\"type\":\"element\",\"signals\":{\"ab\":false},\"meta\":{\"attempt\":14,\"durMs\":3012}},{\"name\":\"ad-delivery-aa\",\"type\":\"url\",\"signals\":{\"aa\":true},\"meta\":{\"attempt\":2,\"durMs\":4039,\"responseStatus\":0}},{\"name\":\"ab-dns-finder-nlf\",\"type\":\"url\",\"signals\":{\"ab\":false},\"meta\":{\"responseStatus\":200}},{\"name\":\"element-aa-detection\",\"type\":\"element\",\"signals\":{\"aa\":false},\"meta\":{\"m5c2t8q\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3011},\"v8n6y4p\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3012},\"w3p9m6d\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3012},\"k2y8f7x\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3012},\"q7d5z1l\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3012},\"x9a7b3k\":{\"isHidden\":false,\"attempt\":14,\"durMs\":3012}}}],\"pm\":true}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:17 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/android-chrome-512x512.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/android-chrome-512x512.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 312455\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-4c487\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRlEGoAr4fv%2F79yXyor%2BWXTl%2BfdXZQiHMCmnYVoGjnsJzOpX9MAlOLKEMJQNKW6XJtb4miU7cHoJAaPHv8YNJGfs2NZj2ADFDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff52d0beb4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"90f095c5fddeb2efedcd629b54b2c2d4","sha1":"d64437fc4716a68b896ad930d130952af5d968a0","sha256":"cdb59a367339739430f343a819973150635e3332d9ede1bc53bd4a5704ba095d","sha512":"7f4cc9f42ba422f277708bd1d2f0e0a4877992108707f14c3427010518191b4fc780ca9f60657546b1aa8596781afdf335de757d361cd004e0f2d96a2634f05a","ssdeep":"6144:MMGUtjWlXeB8k8dUM1tLUqPm6m9SOeyYpXdxLGAwt6yNNM7olCYdgyy:MXIjYXeqdUM7rm61DcAAoyy","tlshash":"9f6422d43d8a5e15d2c53793fdbc4ce35ad28ac4c62786f58c96e1e5c4eca8ae109f20","first_seen":"2026-03-14T02:48:41.645785Z","last_seen":"2026-03-14T02:48:41.645785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-guide.png","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-guide.png HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 441524\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\netag: \"69b3803f-6bcb4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AyPftgUiKUTd8dRqG1wKMVq9N%2F4pWLOtzCrSJNFGpaH6InFhbqJZzitMSbO3iK8IgQByHDDdwD03gbkyOJY0DTz7ViVMMPv30Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbff5341cc64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1558 x 869, 8-bit/color RGBA, non-interlaced","md5":"4d7865b400aabac0d94a6ebe3b35d219","sha1":"c7852af9dfbae9ef923d2d0aea280da71130e6b6","sha256":"ee51107f493c9e01049e7000c3a34ec60da6d3cd8cf96ab19de2ee9e22694fe4","sha512":"0d3ed53c6783707b7c38f5d5a5917506a271cd1557c6c56f93880b17781a032710355b08813039ed5878751227be22ed00e364274b4bd68d87d3c734d1cfc780","ssdeep":"6144:ijgmBeal6FDT/jnMR6V7eZLH3dNl7rMMg4P/U7vdY2RMBokgzmPOYQtsg/s5DeKk:xsFl6FDDjeXd373/ovd7eBokX0aMCYkw","tlshash":"d394e03549b1f852debb497c5ad11b54bf6420d82a92c82e4eea80d33d1613dedc28df","first_seen":"2026-03-14T02:48:41.646598Z","last_seen":"2026-03-14T02:48:41.646598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/images/previews/preview-community.svg","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /images/previews/preview-community.svg HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nl1%2BI1wEIiQIvLoLjsjEXDrARGFr%2FgOBWOqKNjHgef4n%2BCQrA9%2BMXrKIagL4h8KXgsVsBQnoQL64PtD78o8sswHXzR9TrxO%2BXg%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-472\"\r\ncf-ray: 9dbff5341cce4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"733c75cba4151657ea0227ffd2093478","sha1":"8d8c6f0c3ba14902dbbd8fb03a3ef226faff864d","sha256":"6e9599263fe5b77780df9ba0b31195c6cc56b7b013020fdf4b6b88404675e499","sha512":"22ec44ced7aee9af7b6fe8774bf42eb9d36073ec5e4f0e2610db77ccca022ad02df6853034265335e999db1dbe1bcc51a173098a18ee7dd66e67e95d5837d24e","ssdeep":"","tlshash":"d2213835f29e5a17c544860a860fe16e33a5c1c5470a825cf6772fc57e024efd9ce388","first_seen":"2026-03-14T02:48:41.649622Z","last_seen":"2026-03-14T02:48:41.649622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /video/202601281034/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 127141\r\ncf-ray: 9dbff534c97749c5-OSL\r\nx-amz-id-2: s6rQZSJXWVNJy2FNErk2yzIjEdeEMpja/MFKc/PUTFJkvN2EPgfd7IQ6+0QboESdOHXYNxnGDw4=\r\nx-amz-request-id: 4FS2Y0TXV0E1TPHZ\r\nlast-modified: Wed, 28 Jan 2026 15:37:08 GMT\r\netag: \"0388544a1b72fd8dd44e1af1b241ba79\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 1789910\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":364460,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10568)","md5":"e735588497f0d908b08ad7c98ea77b74","sha1":"7944a22c0f3b23d4676c3137e134c2352b95422a","sha256":"c5056f37213e7cfeae12b78a281704b0d07449cb90ba809fb0042942b1673539","sha512":"2d4fc0fcac5b26e450d104cfc46d817d5731974352abb0fa016f8f983111c096d687edf69e150141af3556a0e7fdf1f4396f065ddc29717064e10cf596586d17","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjjsgNyduidvbmZgo/GgmS3mOS2:HRDb+B5dwb6fqvjy4Qvbpvg9","tlshash":"a574b4552f90bc8923d79b7bba2f70d1f46a085b68880c4fe102fc5479e8613fad59b1","first_seen":"2026-01-29T16:27:08.413655Z","last_seen":"2026-06-05T05:22:18.877333Z","times_seen":240,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.7080985904864099","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.7080985904864099 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260512\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff53a68f71a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":28,"dns":2,"connect":1,"send":0,"wait":5,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.9754117415059446","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:15.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.9754117415059446 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260516\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff555bdde1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202601281034/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"172.64.144.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:09.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 05:45:03 GMT","end":"Sat, 23 May 2026 06:44:55 GMT"},"fingerprint":{"sha1":"7E:3A:B2:37:88:29:7A:94:3D:F5:99:E3:F6:66:08:E4:62:0D:E1:97","sha256":"E5:CC:34:3A:73:6F:EC:10:FB:3B:85:E9:15:50:9F:C7:86:4A:12:F8:1E:B4:EE:AB:C7:21:33:7E:EF:A0:2E:68"}}},"request":{"raw":"GET /gptprebidnative/202601281034/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 145217\r\ncf-ray: 9dbff533df8249c5-OSL\r\nx-amz-id-2: GhGuhHkj4auQtSRQSU4JEyFt65UfOV5qHJ38K99XjHvSeeY694mmQ4Cmg7IzaRCi/oCS/ig8lAJlkK1+GJemms/c9zda7ZBt\r\nx-amz-request-id: BAKZB057A4YHJFY0\r\nlast-modified: Wed, 28 Jan 2026 15:37:09 GMT\r\netag: \"e19c971ac3f78801b5317f4b95fc99da\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 1896353\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412568,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10568)","md5":"4d12dc92a4f1d5f6677edc2b071a709f","sha1":"8be298b04db8df5c0a4ee5e8fbef7e960a9d6ee1","sha256":"d862bc766fa3045902025df0000d58458744779bc4b4c60cae39f024ad88b83f","sha512":"c3b2f436cd0d70dacc5dff4f4750561d6a42bf58fbbe61dc3361c3a61326df57499a24c80363a7fc1c90106a97850cef40c6ce0f3630c81b61568fca2fdb6a74","ssdeep":"6144:5pTRmvj4sObuGa/VtB3JTmrEdwb6fqjqrvZ7sgNyduidvbmlwoKDob2nt:HRDb+B5dwb6fqYZ7jy4QvbpomoUt","tlshash":"2994e8516bd0bc592bd36b7bba1b70d1f49b089628940c0fd212fca479ec61beac15f4","first_seen":"2026-01-29T18:23:04.464093Z","last_seen":"2026-06-05T05:22:18.891719Z","times_seen":581,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-1773.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.2.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 10:45:55 GMT","end":"Sat, 23 May 2026 11:45:52 GMT"},"fingerprint":{"sha1":"46:DE:2B:EC:F8:2E:E8:B7:C4:9A:D7:D6:8A:5C:13:5F:32:BD:7C:48","sha256":"FA:4A:D5:59:D5:F5:75:CE:ED:A9:8E:38:E2:79:E1:F3:49:F1:7B:10:75:E7:6E:6E:02:4D:59:36:25:64:9B:FA"}}},"request":{"raw":"GET /ads-1773.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9dbff52d4cc24e4c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 41403\r\ncache-control: private, max-age=600\r\netag: W/\"7c13a6237a72562074ba2761cd013c6c:1773415078000:NO\"\r\nexpires: Sat, 13 Mar 2027 15:18:04 GMT\r\nlast-modified: Fri, 13 Mar 2026 15:17:58 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1773342513092535\r\nx-goog-hash: crc32c=zIIGKQ==, md5=fBOmI3pyViB0uidhzQE8bA==\r\nx-goog-meta-goog-reserved-file-mtime: 1773341857\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 663250\r\nx-guploader-uploadid: AGQBYWzAocmMdMkNiK-Ig780mo7WCKcYysy-6UUFoU2FFhkpTLTWcGeAsUaUVKiZlagtjQVn\r\nset-cookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4; path=/; expires=Sat, 14-Mar-26 03:18:08 GMT; domain=.nitropay.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":668868,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59852)","md5":"4a5f2d300fb667eb92abd9d482019c54","sha1":"cf91336f3fc92e84a936252c70661fb75476c20f","sha256":"e5ca68340913a7a9bfc7fd5af9fadc9d9516d3213d171f7bb5be8efb32335bd9","sha512":"3656f617d6dce083c45fb47c3ba86f58bc8974fc4532b3cf6713fd54efdbcd733b8b57fbfa6e2e35b5f36816c74c6d9fcd4734168a83ace3a0e8a57aa9f0eae7","ssdeep":"12288:LllGSv26kkH62QnSDZDZNdPCb2iDjLbU/Vxe92RqZdmJMPUfIO:LllGSv26kkH62QnSDPNdPCbTLbU/C92F","tlshash":"4ee45c8a3292f4ba43f654e5d03b4705f2396a053409c450f52eadeb3929e9b7273f78","first_seen":"2026-03-14T02:48:41.652211Z","last_seen":"2026-03-14T02:48:41.652211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":17,"dns":4,"connect":1,"send":0,"wait":23,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-14","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-1773.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.5272046730004993","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"172.66.148.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:10.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 23:01:03 GMT","end":"Wed, 27 May 2026 00:00:46 GMT"},"fingerprint":{"sha1":"F1:55:14:26:AC:03:34:3A:69:CF:36:47:37:82:FD:10:32:4B:30:E5","sha256":"89:C8:2C:BC:DF:9A:57:EC:C4:33:DB:D8:2F:1B:99:EF:06:DC:1D:82:D7:44:B6:8E:44:8D:7E:36:43:2F:F9:3B"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.5272046730004993 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 02:48:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 11 Mar 2026 03:15:54 GMT\r\ncache-control: public, max-age=86400\r\nage: 260512\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\ncf-ray: 9dbff53a68fd1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T02:49:07.792231Z","times_seen":368569,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":20,"dns":2,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.btloader.com/exd?tid=Zetk4NQr-M9kry0eVoO-9cea3e8051\u0026sid=aXPGu1B9y-GzPna8ys3-9cea3e8051\u0026cv=2.1.184\u0026upapi=true","fqdn":"api.btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"130.211.23.194","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:14.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.btloader.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 19:14:14 GMT","end":"Fri, 05 Jun 2026 20:08:47 GMT"},"fingerprint":{"sha1":"25:50:57:33:6C:C6:FC:C6:62:E6:5C:AF:AE:86:D2:4A:80:3E:2F:AF","sha256":"69:3E:EC:E2:E2:0C:F3:D5:0D:0A:C7:32:CC:E2:BA:DB:FE:F9:22:36:3E:3B:37:6F:AF:1C:16:12:E2:E2:1B:C2"}}},"request":{"raw":"POST /exd?tid=Zetk4NQr-M9kry0eVoO-9cea3e8051\u0026sid=aXPGu1B9y-GzPna8ys3-9cea3e8051\u0026cv=2.1.184\u0026upapi=true HTTP/1.1\r\nHost: api.btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\nContent-Length: 283\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":283,"data":"{\"websiteID\":\"5177240064622592\",\"orgID\":\"6278260873756672\",\"pageUrl\":\"https://d2emu.com/\",\"extensionsData\":{\"signals\":{\"xAcceptableAdsHeader\":\"\"},\"trustedIframe\":{\"meta\":{\"loadStatus\":\"LOADED\",\"loadTime\":3414},\"htmlSignalAttributes\":[]}},\"sentOnUnload\":false,\"sentOnSPAChange\":false}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin\r\ndate: Sat, 14 Mar 2026 02:48:14 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":91,"dns":3,"connect":12,"send":0,"wait":141,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/openrtb2/auction","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:20.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:37:36 GMT","end":"Wed, 03 Jun 2026 00:33:31 GMT"},"fingerprint":{"sha1":"80:C5:F5:7E:3A:20:AD:65:23:E0:16:27:C5:DC:6D:AD:59:2F:6B:46","sha256":"DC:25:88:CD:17:DC:ED:84:33:7A:26:76:44:E3:30:BF:F7:6D:FE:ED:AB:F4:B5:12:78:9B:5D:31:CD:C8:0C:FD"}}},"request":{"raw":"POST /openrtb2/auction HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2emu.com/\r\ncontent-type: text/plain\r\nContent-Length: 2078\r\nOrigin: https://d2emu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=YkOIm3s9x_x14wVmSttHsF6oV4HgrHUO8Mz8sDzOY2w-1773456488-1.0.1.1-8.42txpYZtYNOX9JdGsOT_ZTxd70dWQSUTcoMXVkGDzw3_caU2bekHTSP70akP5_Kxp_V_wthqKtLXTGkakM6JIcl0wiiJ.icxGeKgXtpr4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2078,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1387/1773/banner-left\",\"data\":{\"pbadslot\":\"/nitro/1387/1773/banner-left\",\"adserver\":{\"adslot\":\"banner-left\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"msft-s2s\":{\"placement_id\":35743233},\"openx-s2s\":{\"delDomain\":\"ggsoftware-d.openx.net\",\"unit\":\"564010828\"}},\"adunitcode\":\"banner-left\"}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":160,\"h\":600},{\"w\":300,\"h\":600},{\"w\":300,\"h\":250}],\"pos\":3},\"id\":\"banner-left\",\"secure\":1}],\"source\":{\"tid\":\"41c774a9-4e96-4297-ad00-315c17265c27\",\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]}}},\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"d2emu.com\",\"publisher\":{\"domain\":\"d2emu.com\",\"id\":\"1\"},\"page\":\"https://d2emu.com/\",\"name\":\"d2emu\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"680\",\"687\"],\"kwarray\":[\"Action RPG / Soulslike\",\"Diablo II\",\"Modding\",\"Emulation\",\"Private Servers\",\"Hack and Slash\",\"Game Development\",\"Reverse Engineering\",\"Blizzard Entertainment\",\"Game Server Hosting\"],\"ext\":{\"data\":{\"documentLang\":\"en\"}},\"content\":{\"language\":\"en\"}},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQhDnIAQhDnIADyvWAENCVFAAAAAAAAAACiQAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"d2emu.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"68d8f28e-1da0-456a-b6aa-f07d3db9187e\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1}},\"ext\":{\"prebid\":{\"auctiontimestamp\":1773456500437,\"targeting\":{\"includewinners\":true,\"includebidderkeys\":false},\"aliases\":{\"msft-s2s\":\"appnexus\",\"openx-s2s\":\"openx\"},\"floors\":{\"enabled\":true},\"schains\":[{\"bidders\":[\"msft-s2s\",\"openx-s2s\"],\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1387\",\"hp\":1}]}}],\"channel\":{\"name\":\"pbjs\",\"version\":\"v10.16.0\"}},\"tmaxmax\":2200},\"id\":\"f1bdc130-1646-4392-adc9-d46470a2c396\",\"test\":0,\"tmax\":1500}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://d2emu.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\nx-prebid: pbs-go/3.29.0\r\ndate: Sat, 14 Mar 2026 02:48:20 GMT\r\ncontent-length: 304\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c2a40c8683eb7938d0f808d5c781a5e","sha1":"13ff5b0d9ce7406dad8687e9edf445f4bf8409f8","sha256":"0918965174eb448fc7b80249d8fabc56a893b20e27dd2ba9a5b0205c3785494d","sha512":"847e8f51ccd2c1f835b32f04aab69df7aa38b1784ed3a36a01fe41e37dd9fc480b69a43bb97065e700cac5f1f26a41db1187d4169b7c095a62d63613835d4b71","ssdeep":"","tlshash":"7ce07d571a5a4df6ab1f3a437a1f050000a531589298de0f3e7c823c146841d0026151","first_seen":"2026-03-14T02:48:41.653227Z","last_seen":"2026-03-14T02:48:41.653227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2emu.com/css/dclone.css","fqdn":"d2emu.com","domain":"d2emu.com","tld":"com"},"ip":{"addr":"172.67.151.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d2emu.com/","date":"2026-03-14T02:48:08.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2emu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 19:01:04 GMT","end":"Wed, 06 May 2026 19:59:33 GMT"},"fingerprint":{"sha1":"83:8B:A8:E0:6F:87:BA:B7:AF:03:CE:CA:0B:01:88:39:1B:32:9E:AE","sha256":"E8:82:65:DE:B8:FC:55:52:12:DC:C2:9B:2C:65:04:F7:28:31:77:6B:0A:0D:BA:F2:F5:7F:06:C0:34:85:3B:F1"}}},"request":{"raw":"GET /css/dclone.css HTTP/1.1\r\nHost: d2emu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2emu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 02:48:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzsWeuxxj%2Bjglhp8KzoN6VIXI4JfHcM5UrFA5uYsPhZ7zj5H%2Fa0ofbCng%2BIlQk8BZIXjwNsm%2FwgRd3Dzh6KY9YfwuCGNs%2Favjw%3D%3D\"}]}\r\nlast-modified: Fri, 13 Mar 2026 03:10:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b3803f-4514\"\r\ncf-ray: 9dbff52d0be64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"e9eb2c34dcc050a69cd67693624183a2","sha1":"2e23505f82c6fcaee3ccdbb5d58c5d46e0a43b4a","sha256":"bf05ad004b88f76abeadb94ca88b938c5929dc53f433c7d35d80f716f68330d2","sha512":"c9300d796db0879d989dfb064498ee7e9172b3aa4a1df416057978620efd4c284a60ce4c6fd5d8b34be86f96cc25fd1af00945c32ca9df9f2de24ab0addd6e5e","ssdeep":"384:lFTKx77NgF3HZKUiDtvVlFUFjFFUFjsny:lFTKxKF3HZH8t7FUFjFFUFCy","tlshash":"e1824445dda309027817c55c5ffa4349e32d9047c90ade2d7bd6218c8fce298e9aebd8","first_seen":"2026-03-14T02:48:41.654274Z","last_seen":"2026-03-14T02:48:41.654274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}